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administered  by  the  Advanced  Technology  Section,  Aerodynamic 
Decelerator  Branch,  Flight  Accessories  Laboratory,  Directorate 
of  Advanced  Systems  Technology,  Wright  Air  Development  Division, 
under  Contract  No.  AF  33 (616) -6544,  "Study,  Reliability  Deter¬ 
mination  for  Heavy-Duty  Parachute  Systems."  Mr.  J.  DeWeese 
was  the  WADD  Project  Engineer. 

The  assistance  and  cooperation  of  Mr.  DeWeese,  Mr.  Alfons 
Hegele,  and  of  other  personnel  of  the  Aerodynamic  Decelerator 
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the  cooperation  of  the  personnel  of  the  Military  and  Industrial 
organizations  listed  in  Appendix  D. 
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ABSTRACT 


This  report  presents  a  model  for  the  computation  of  heavy- 
duty  parachute  system  reliability  based  on  the  reliability  of 
the  individual  components  and  sub-components  of  the  system  and 
the  operational  reliability  of  the  system  as  a  whole.  The 
model  is  applicable  to  the  estimation  of  system  reliability  in 
field  use;  it  can  be  applied  at  any  desired  phase  in  the  develop¬ 
ment  of  the  system. 

Methods  of  selecting  the  applicable  terms  for  the  model 
for  a  specific  parachute  system,  and  the  details  of  computa¬ 
tion  of  component  reliability  values  from  various  types  of 
field  use,  laboratory  test,  and  engineering  data  to  a  pre¬ 
selected  confidence  coefficient  are  presented.  A  worked  ex¬ 
ample  of  a  reliability  analysis  of  a  hypothetical  parachute 
system  is  used  to  illustrate  the  application  of  the  method. 

Numerical  results  of  reliability  analyses  of  parachute 
packing,  reefing  line  cutter  performance,  and  some  solid  fabric 
canopies,  and  data' on  parachute  materials  strength  tests  usable 
in  the  analysis  are  included.  The  mathematical  derivation  of 
the  reliability  methodology  is  presented  in  an  appendix. 
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SECTION  1 


INTRODUCTION 


The  study  upon  which  this  report  is  based  was  undertaken 
to  develop  a  method  for  determining  the  reliability  of  heavy- 
duty  parachute  systems.  The  method  of  reliability  analysis 
resulting  from  this  work  is  intended  for  use  as  a  tool  of  the 
parachute  design  and  development  agency.  Within  the  framework 
established  by  the  project  directives,  the  study  is  pointed 
toward  the  assessment  of  the  reliability  of  the  fully  developed 
parachute  system  in  its  field  use  application. 

The  first  portion  of  this  report  deals  with  the  develop¬ 
ment  of  a  reliability  concept  applicable  to  the  evaluation  of 
parachute  performance.  This  is  followed  by  discussions  of  the 
reliability  model  developed,  means  of  applying  the  model  to 
specific  parachute  systems,  and  the  methods  for  evaluating  the 
individual  terms  in  the  model.  The  method  of  application  of 
the  model  to  the  analysis  of  the  reliability  of  a  parachute 
system  is  illustrated  by  a  worked  example,  using  a  hypothetical 
parachute  system.  Numerical  data  on  observed  failure  rates  and 
the  results  of  reliability  analyses  of  specific  parachute  com¬ 
ponents,  data  on  parachute  materials  strength,  and  a  detailed 
discussion  of  the  mathematical  methods  developed  are  presented 
in  three  appendixes . 

The  term  "reliability"  is  used  in  this  report  in  its  com¬ 
monly  accepted  sense:  it  refers  to  an  inverse  measure  of  the 
expected  failure  rate,  that  is,  to  the  figure  obtained  by  sub¬ 
tracting  the  expected  rate  of  failure  of  a  system  from  unity. 

The  important  concept  here  is  the  use  of  the  term  "expected" 
rate  of  failure".  The  calculated  reliability  of  a  system 
cannot  be  used  to  forecast,  on  an  absolute  basis,  the  perform¬ 
ance  of  a  single  example  of  that  system  in  a  single  use.  It 
gives  the  "odds",  but  does  not  foretell  the  result  of  any 
single  event.  It  refers  to  the  rate  of  successful  uses  to  be 
expected  when  a  large  number  of  identical  systems  are  used, 
or  when  a  given  system  is  used  a  large  number  of  times,  although 
in  the  case  of  the  single-use  parachute  systems  considered  here, 
the  former  statement  is  the  applicable  one. 
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The  rationale  used  in  developing  the  reliability  model  in 
this  study  assumes  that  the  parachute  system  is  to  be  evaluated 
after  (1)  it  has  been  through  its  preliminary  design  stages, 

(2)  a  minimum  number  of  models  have  been  built  and  tested,  (3) 
the  results  of  these  tests  have  been  evaluated,  and  necessary 
design  changes  made,  (4)  modified  models  have  been  fabricated 
and  tested,  design  faults  found  have  been  corrected,  and  revised 
models  tested  until  the  design  can  be  finalized,  and  (5)  a 
limited  number  of  final  models  are  fabricated  and  tested  to 
demonstrate  the  adequacy  of  the  final  design. 

Because  of  these  assumptions,  the  reliability  model  pre¬ 
sented  is  most  useful  in  forecasting  the  performance  of  the 
parachute  system  after  the  development  process  is  completed. 

The  type  of  development  process  assumed  will  "shake  out"  major 
design  errors,  both  in  materials  choice  and  component  arrange¬ 
ment.  Thus,  the  factors  which  contribute  to  "unreliability" 
in  the  final  parachute  design  will  be  due  to  "chance"  human 
and  material  deficiencies,  and  hence  will  be  susceptible  to 
probability  analyses. 

The  reliability  of  a  parachute  system  in  field  use  must 
be  relatively  high;  since  the  factors  which  tend  to  reduce 
reliability  are  found  and  corrected  during  development,  the 
reliability  trend  during  the  development  process  must  be  one 
of  continuous  increase.  Thus,  while  the  application  of  any 
reliability  model  to  the  determination  of  system  reliability 
at  any  intermediate  phase  in  the  development  process  is  pos¬ 
sible,  the  value  of  the  results  so  obtained  will  be  only 
transitory. 

For  these  reasons,  the  reliability  model  developed  in 
this  study  has  been  pointed  primarily  at  the  determination  of 
the  performance  of  the  final  product  of  the  parachute  system 
design  process.  It  may  be  used  to  forecast  this  final  reli¬ 
ability  at  any  stage  in  the  development.  The  confidence  which 
may  be  placed  in  the  accuracy  of  the  reliability  calculated, 
of  course,  will  be  greater  as  the  development  process  pro¬ 
gresses  and  more  information  on  the  system  is  available  for 
the  evaluation  of  the  model. 

The  parachute  system  reliability  model  presented  in  this 
report  is  completely  general,  and  can  be  applied  to  any  type 
of  parachute  system.  However,  in  the  development  of  the  data 
necessary  to  apply  it,  this  study  has  been  pointed  specifically 
toward  the  evaluation  of  heavy-duty  parachute  system  reliabil¬ 
ity.  Thus,  to  use  the  model  to  evaluate  the  reliability  of 
other  types  of  parachute  systems,  it  will  be  necessary  to 
develop  additional  data,  chiefly  on  the  performance  of  the 
system  components  and  the  materials  used  in  their  fabrication. 
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In  addition,  it  will  be  necessary  to  introduce  a  "wear  out" 
factor  for  those  systems  in  which  the  parachutes  may  be  sub¬ 
jected  to  repeated  use. 
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SECTION  2 


APPLICATION  OF  RELIABILITY  CONCEPT  TO  PARACHUTE  SYSTEMS 


In  the  development  of  a  reliability  model  for  a  parachute 
system,  it  is  necessary  to  choose,  within  rather  narrow  limits, 
the  boundaries  defining  the  system,  the  use  conditions  under 
which  its  reliability  will  be  considered,  and  the  measures  of 
success  in  the  parachute  mission.  In  the  first  place,  it  is 
necessary  to  know  the  exact  points  in  the  rather  complex 
sequence  of  parachute  system  operation  at  which  the  reliabil¬ 
ity  computations  begin  to  apply  and  that  point  at  which  they 
cease  to  apply.  Further,  if  the  reliability  statement  com¬ 
puted  is  to  be  meaningful,  it  is  necessary  to  specify  the 
limits  of  applicability  of  the  system  with  respect  to  the 
physical  conditions  of  use:  deployment  speed  and  altitude, 
load,  aircraft  maneuvers,  etc.  Finally,  a  definition  of  suc¬ 
cess  or  failure  of  the  parachute  mission  is  necessary  as  a 
yardstick  upon  which  to  base  the  computation  of  system  relia¬ 
bility. 


2 . 1  Limits  of  Applicability 


In  the  application  of  the  generalized  reliability  model 
developed  in  this  study  to  the  specific  problem  of  the  heavy- 
duty  parachute  system,  the  parachute  system  performance  has 
been  considered  from  the  start  of  its  deployment  to  the 
instant  of  touchdown  (or  upon  reaching  its  equilibrium  veloc¬ 
ity)  .  Thus,  the  operation  of  the  device  which  releases  the 
parachute  from  the  aircraft,  and  the  operation  of  the  ground 
disconnect  device,  if  any,  are  not  considered  in  the  study  of 
the  reliability  of  the  parachute  system. 

Further,  in  those  cases  in  which  the  parachute  is  deployed 
automatically  from  a  compartment  in  the  load,  the  study  does 
not  consider  the  design  of  the  parachute  compartment,  nor  of 
the  explosive-operated  or  other  device  which  effects  the  open¬ 
ing  of  this  compartment  so  that  parachute  deployment  may  be 
initiated. 

The  above  are  the  system  boundaries  specified  for  this 
study  by  project  directives.  If  desired,  the  reliability 
model  can  readily  be  expanded  to  include  other  aspects  of  the 
parachute  system  use,  including  the  pre-release  operations  in 
the  aircraft  and  the  process  of  touchdown  and  canopy  discon¬ 
nect  where  applicable. 
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In  assessing  the  reliability  of  any  system,  it  is  neces¬ 
sary  to  define  the  conditions  of  system  use  under  which  the 
reliability  is  to  be  computed.  Thus,  in  the  consideration  of 
a  parachute  system,  maximum  load,  maximum  deployment  speed, 
minimum  (and  possibly  maximum)  altitude,  allowable  aircraft 
maneuvers,  and  other  factors,  under  certain  conditions,  must 
be  defined  in  order  to  provide  a  basis  for  the  computations. 

If  the  parachute  system  is  used  under  less  severe  conditions, 
its  reliability  may,  and  probably  will,  be  higher  than  when 
in  use  under  maximum  allowable  stress.  If  it  is  used  under 
more  severe  conditions,  the  reliability  will  probably  decrease 
as  the  severity  of  the  use  increases,  to  a  point  at  which  the 
system  fails  so  frequently  as  to  be  unusable. 

Thus,  any  reliability  figures  which  may  be  developed  as 
a  result  of  the  work  described  herein  should  be  regarded  as 
an  indication  of  the  performance  of  a  system  when  it  is  used 
under  its  design  conditions.  If  the  conditions  of  use  are 
less  severe  than  those  upon  which  the  calculations  are  based, 
the  figures  may  be  regarded  as  minimum  reliability.  In  the 
case  of  system  use  beyond  the  design  limits,  the  reliability 
computations  based  on  design  limits  will  not  apply. 

One  additional  set  of  factors  which  affect  the  reliabil¬ 
ity  of  parachute  systems,  to  some  extent  at  least,  are  the 
atmospheric  conditions  under  which  they  are  used.  Rain,  snow, 
gusts  (both  horizontal  and  vertical)  and  other  meteorological 
phenomena  undoubtedly  have  some  effect  on  the  success  of  para¬ 
chute  missions  during  which  they  occur.  However,  if  such 
factors  were  included  in  a  reliability  model  designed  for 
routine  use  in  forecasting  parachute  system  performance  on  a 
world-wide  basis,  they  would  complicate  the  computational 
process  to  the  point  at  which  the  utility  of  the  method  would 
become  open  to  question.  Consequently,  consideration  of  the 
effects  of  weather  conditions  upon  parachute  reliability  has 
been  omitted  in  this  study,  although  the  general  model  developed 
can  be  ised  to  calculate  their  effect  if  adequate  data  and 
computational  effort  can  be  made  available. 


2.2  Measures  of  Success 


In  order  to  apply  the  concept  of  reliability  to  the  use 
of  a  specific  parachute  mission,  it  is  necessary  to  have  a  firm 
definition  of  success,  and  hence  of  "failure",  of  the  mission. 
Obviously,  for  parachute  use  in  general,  the  measure  of  suc¬ 
cess  is  the  safe  delivery  of  the  load  to  the  desired  point. 
This,  however,  is  not  an  adequate  definition  for  the  purposes 
of  this  study;  two  questions  arise:  (1)  What  is  "safe  delivery" 
in  the  use  of  a  heavy-duty  parachute  system  in  delivering  a 
weapon?  and  (2)  How  close  to  the  aim  point  must  the  load  touch 
down? 
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For  the  usual  type  of  cargo  parachute  use,  these  questions 
are  related.  Safe  delivery  depends  on  the  rate  of  descent 
being  within  certain  limits,  and  the  trajectory  of  the  system 
depends  on  the  rate  of  descent.  In  the  case  of  the  heavy-duty 
parachute  system,  the  problem  of  safe  delivery  is  really  one 
of  meeting  trajectory  requirements.  Since  the  type  of  load 
delivered  may  not  require  pin-point  accuracy,  there  is  usually 
more  or  less  of  a  range  of  descent  rates  which  will  result  in 
adequate  system  .performance . 

In  order  to  avoid  the  complexities  of  calculating  the 
effects  of  various  possible  types  of  events  during  the  deploy¬ 
ment  of  the  parachute  system  on  the  descent  rate  and  landing 
point,  a  somewhat  different  approach  to  the  definition  of  a 
successful  heavy-duty  parachute  system  mission  has  been  taken 
herein.  For  the  purposes  of  evaluation  of  the  reliability 
model,  a  parachute  failure  is  defined  as  the  failure  of  any 
portion  of  the  parachute  construction  which  will  cause  an 
unsuccessful  drop,  or  as  a  use  in  which  the  parachute  packing 
process  was  improperly  performed,  so  that  the  parachute  deploys 
in  such  a  manner  as  to  cause  failure  of  the  mission. 

There  are  two  requirements  for  the  use  of  this  type  of 
criterion  of  mission  success:  first,  it  is  necessary  to 
evaluate  human  performance  in  parachute  packing,  and  second, 
it  is  necessary  for  the  agency  doing  the  evaluation  to  estab¬ 
lish  its  own  criteria  of  what  constitutes  failure  of  the 
specific  parachute  system  under  evaluation. 

The  first  of  these  problems  has  been  met  by  a  statistical 
study  of  the  parachute  packing  failure  rate  for  various  types 
of  systems.  The  second  involves  no  major  complications.  The 
evaluation  of  parachute  system  reliability  is  basically  an 
engineering  problem,  and  requires  that  the  engineer  understand 
the  operation  and  construction  of  the  system.  Thus,  he  is  in 
the  best  position  to  determine  which  portions  of  the  construc¬ 
tion  are  critical  in  the  success  of  the  system,  and  to  choose 
his  failure  criteria  accordingly.  Failure  criteria  chosen  in 
this  manner  are  tailored  for  the  specific  parachute  system 
under  evaluation;  they  will  undoubtedly  produce  better  results 
than  a  rigid  set  of  failure  criteria  set  up  for  application  to 
all  possible  parachute  systems. 


2 . 3  Summary 


The  reliability  model  developed  in  this  study  is  appli¬ 
cable  to  the  evaluation  of  the  overall  expected  rate  of  suc¬ 
cessful  use  of  a  heavy-duty  parachute  system,  within  the 
framework  of  the  definition  of  success  established  by  the 
evaluating  agency,  under  the  following  conditions; 
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1.  Only  the  parachute  system  itself  is  evaluated 
(deployment  initiation  devices  and  ground  dis¬ 
connects  are  excluded) . 

2.  The  parachute  system  is  used  within  its  design 
limits , 

3.  The  parachute  system  is  a  single-use  system. 
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SECTION  3 


DEVELOPMENT  OF  THE  RELIABILITY  MODEL 


There  are  a  number  of  approaches  which  may  be  taken  to 
the  determination  of  the  reliability  of  various  types  of  sys¬ 
tems;  a  considerable  volume  of  material  has  been  published  on 
the  subject . However,  most  of  the  work  in  the  field  of 
reliability  has  been  pointed  specifically  toward  the  problems 
of  electronic  circuitry,  or  similarly  complex  systems,  in  which 
the  mode  of  failure  is  primarily  time-based.  Thus,  the  reli¬ 
ability  of  an  electronic  circuit  is  principally  a  measure  of 
the  probability  of  its  successful  opera.tion  for  a  given  period 
of  time. 

Heavy-duty  parachute  systems,  on  the  other  hand,  are  only 
required  to  operate  once,  and  from  a  practical  viewpoint,  are 
likely  to  fail  (within  the  framework  of  the  definition  of 
failure  outlined  in  the  previous  section)  only  during  the 
deployment  and  opening  process.  Thus,  time-based  reliability 
models,  based  on  testing  equipment  to  failure  or  to  a  specific 
number  of  cycles  of  usage  (the  life  test  approach"/)  do  not 
generally  apply  to  the  present  problem. 

There  are  other  means  of  determining  the  reliability  of 
systems  which  may  be  applicable  to  heavy-duty  parachute  sys¬ 
tems.  In  general,  these  are  based  on  trials  of  a  number  of 
systems  (or  the  components  of  systems) ,  rather  than  repeated 
or  continuous  trials  of  the  same  system  or  small  groups  of 
systems.  Some  of  these  methods  are  discussed  below. 


3 . 1  Overall  Reliability  Approach 


The  least  complex  approach  to  the  study  of  the  reliabil¬ 
ity  of  a  single-use  system  consists  of  testing  a  number  of 
systems  to  determine  the  failure  rate  of  the  sample,  and  pro¬ 
jecting  this  rate,  with  allowance  for  an  adequate  confidence 
coefficient,  as  the  failure  rate  of  all  systems  made  to  the 
same  specifications.  In  the  application  of  this  approach  to 
heavy-duty  parachute  systems  there  are  two  possible  results 
to  each  test:  pass  or  fail.  Thus,  the  failure  rate  is  binom- 
ially  distributed,  and  the  reliability  of  the  system  (failure 
rate  subtracted  from  unity)  can  be  calculated  readily  from  the 
sample  test  results.—/ 
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In  presenting  the  failure  rate  (or  the  reliability)  cal¬ 
culated  in  this  manner,  good  statistical  practice  requires 
that  two  figures  be  given,  the  computed  expected  failure  rate 
and  the  confidence  coefficient  of  this  rate,  for  example: 

"An  expected  failure  rate  of  0,001  (or  a  reliability  of  0.999) 
at  a  90%  confidence  coefficient."  This  statement  may  be 
interpreted  in  the  following  manner:  If  a  large  number  of  sets 
of  samples  are  tested,  it  will  be  found  that  the  reliability 
of  the  systems  in  the  sets  will  be  0.999  at  least  90%  of  the 
time . 


The  reasoning  behind  the  formulation  of  the  reliability 
or  failure  rate  statement  in  this  manner  is  based  on  the  fact 
that  the  statement  made  is  applied  to  all  the  systems  con¬ 
structed  (or  to  be  constructed)  to  the  given  specification,  ' 
while  only  a  portion  of  the  total  number  manufactured  (or  to 
be  manufactured)  were  actually  used  in  the  test.  Thus,  the 
reservation  about  the  calculated  reliability  stated  in  the 
confidence  coefficient  allows  for  the  fact  that,  by  accident, 
the  proportion  of  failures  in  the  sample  tested  may  not  be 
completely  representative  of  the  proportion  of  failures  which 
will  occur  when  all  the  systems  manufactured  are  used. 

In  calculating  system  reliability  by  this  method  from  a 
given  series  of  test  results,  the  confidence  coefficient  used 
must  be  selected  by  the  evaluating  agency.  Any  desired  con¬ 
fidence  coefficient  may  be  used  in  the  calculation,  although 
in  practice  the  choice  of  a  100%  level  will  not  give  meaning¬ 
ful  results  for  reasons  discussed  below.  In  the  choice  of  a 
confidence  coefficient  for  the  calculations,  it  must  be 
realized  that  the  higher  the  confidence  coefficient  used,  the 
lower  the  reliability  (or  the  higher  the  failure  rate) ,  and 
vice  versa.  This  is  illustrated  in  Figure  1,  which  presents 
two  sets  of  curves  for  the  same  series  of  tests,  one  for  a 
90%  confidence  coefficient  and  the  other  for  99%  confidence. 

It  can  be  seen  that  the  reliability  calculated  at  the  lower 
confidence  coefficient  will  be  greater  than  that  calculated 
at  the  higher  coefficient,  although  the  two  values  tend  to 
become  closer  with  a  large  number  of  tests. 

The  choice  of  a  confidence  coefficient  for  reliability 
calculations  in  practical  cases  tends  to  be  dictated  by  the 
amount  of  test  data  available  for  study.  Unless  the  test 
data  can  be  obtained  from  trials  of  the  system  made  for  pur¬ 
poses  other  than  reliability  testing,  the  cost  of  doing  the 
testing  is  probably  the  controlling  factor  in  the  choice  of 
confidence  coefficient.  Figure  2  is  a  generalized  plot  of 
the  relative  cost  of  reliability  testing  versus  the  confidence 
coefficient.  It  can  be  seen  that  the  major  increase  in  cost 
begins  at  about  the  90%  confidence  coefficient,  and  that  by 
working  at  this  level,  the  evaluating  agency  gets  the  greatest 
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Figure  1.  Reliability  Levels  for  a  Series  of  Tests  With  and  Without  Failures 
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Figure  2.  Cost  of  Testing  to  a  Given  Confidence  Coefficient 


I’eturn  for  the  amount  of  money  spent.  Obviously,  100%  confi¬ 
dence  has  no  real  meaning  in  this  concept,  since  its  achieve¬ 
ment  requires  an  infinite  number  of  tests.  That  is,  to 
achieve  100%  confidence  in  a  reliability  statement  requires 
knowledge  of  the  results  of  every  use  of  the  system,  includ¬ 
ing  advance  knowledge  of  future  uses. 

When  the  problem  of  determining  the  reliability  of  heavy- 
duty  parachute  systems  is  considered,  from  a  confidence  co¬ 
efficient  viewpoint,  the  information  presented  in  Figure  1 
becomes  the  key  issue.  Even  if  no  failures  whatsoever  are 
encountered  in  testing,  over  twenty  systems  must  be  tested  to 
be  sure  of  0.9  reliability  at  a  90%  confidence  coefficient. 

If  assurance  of  0.98  reliability  is  desired  at  a  90%  confi¬ 
dence  coefficient,  about  100  systems  must  be  tested  without 
failure.  If  greater  confidence  in  the  results  is  desired, 
e.g.  99%,  about  50  systems  must  be  tested  without  failures' 
to  assure  0.9  reliability;  the  testing  of  100  systems  will 
assure  only  about  0.93  reliability. 

If  the  reliability  model  is  to  be  applied  to  a  system 
under  development,  to  forecast  its  performance  when  it  reaches 
the  field-use  stage,  it  is  doubtful  whether  adequate  use  data 
would  be  available  for  such  computations.  The  data  needed 
are  the  results  of  tests  of  the  system  in  its  final  configu¬ 
ration.  Thus,  data  on  development  test  series  during  which 
the  system  configuration  is  clianged  to  eliminate  defects  are 
not  applicable,  both  because  of  difference  in  the  physical 
make-up  of  the  parachute  system  and  because  of  possible  dif¬ 
ferences  in  the  use  conditions. 

Use  data  on  the  final  configuration  of  the  system  are 
rarely  available  in  any  quantity,  even  at  the  end  of  the 
development  phase.  Indeed,  when  the  applications  of  the 
heavy-duty  parachute  system  are  considered,  it  can  be  seen 
that  the  generation  of  sufficient  use  data  for  the  type  of 
reliability  computation  described  above  is  very  unlikely, 
even  after  the  system  has  been  developed  for  field  use. 

For  any  item  as  complex  and  as  expensive  to  test  as  a 
heavy-duty  parachute  system,  the  number  of  tests  required  for 
reliability  computations  by  the  method  described  above  is 
obviously  excessive.  By  the  use  of  sequential  analysis 
the  number  of  tests  which  must  be  performed  for  a  given  con¬ 
fidence  coefficient  can  be  reduced  to  some  extent  (under 
certain  conditions  by  as  much  as  50%^LtZ' )  ,  but  the  amount  of 
testing  required  for  this  type  of  analysis  is  still  quite 
expensive . 
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The  applicability  of  this  type  of  analysis  to  the  heavy- 
duty  parachute  reliability  problem  comes  in  the  study  of  indi¬ 
vidual  component  reliability  (see  below),  when  certain  components 
of  the  heavy-duty  system  (e.g.,  reefing  line  cutters,  soxid 
canopies)  for  which  extensive  use  data  are  available  are  also 
used  in  other  parachute  systems. 


3 . 2  Component  Reliability  Approach 


The  overall  approach  to  system  reliability  discussed  above 
considers  the  parachute  system  as  a  unit,  and  measures  its 
reliability  by  measuring  the  performance  of  the  whole  system. 
The  component  approach  to  system  reliability,  on  the  other 
hand,  measures  the  reliability  of  each  component  of  the  system, 
and  computes  the  reliability  of  the  complete  system  from  the 
reliability  of  its  components  and  the  operational  reliability 
of  the  combination  of  components.  The  advantage  of  the  com¬ 
ponent  approach  is  that  it  can  utilize  laboratory  test  data, 
engineering  computations,  or  actual  field  use  experience  with 
identical  components  in  other  systems  to  compute  the  reliabil¬ 
ity  of  the  complete  system,  without  requiring  extensive  test¬ 
ing  of  the  entire  system. 


3.2.1  Basic  Concept 

The  basic  mathematical  model  describing  the  component 
reliability  method  is 


R  -  Rp. Rc^  .  .  . Rcj^ 

where 


(1) 


R  =  System  reliability 
Rp  =  Operational  reliability 

Rcj^...Rcn  ~  Reliability  of  individual  components. 

In  this  model,  the  term  "reliability"  has  its  usual  meaning, 

R  =  (1-F) ,  where  F  represents  the  failure  rate. 

The  operational  reliability  term  in  this  model  represents 
the  rate  of  failure  which  can  be  expected  because  parachute 
system  components  must  function  in  a  specific  manner  and  in  a 
specific  sequence  during  deployment  and  inflation  of  each  of 
the  individual  canopies  in  the  system.  The  component  terms, 
on  the  other  hand,  represent  the  rate  of  failure  which  can  be 
expected  to  result  from  inherent  weaknesses  of  each  of  the 
components  of  the  system.  Together,  these  have  been  taken  as 
the  total  significant  causes  of  failure  in  a  parachute  system. 
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3.2.2  Data  Required 


To  use  the  above  model  in  a  practical  evaluation  of  para¬ 
chute  reliability,  it  is  necessary  to  develop  methods  of  eval¬ 
uating  the  specific  terms  in  the  model. 

Actually,  there  are  two  types  of  terms  to  be  evaluated, 
those  representing  the  reliability  of  the  individual  parts  of 
the  system  (the  number  of  terms  required,  of  course,  will  de¬ 
pend  on  the  characteristics  of  the  system  being  studied  — 
see  next  section)  and  the  term  which  represents  the  reliability 
of  the  operation  of  these  parts  as  a  system. 


3. 2. 2.1  Component  Terms.  In  evaluating  the  component 
reliability  terms ,  tFree  possible  approaches  to  the  calcula¬ 
tion  of  the  probability  of  failure  of  a  given  component  have 
been  studied.  The  preferable  method  of  calculation  utilizes 
test  data  on  the  component  generated  in  its  use  in  other  para¬ 
chute  systems,  or  by  deliberate  testing,  laboratory  or  field, 
to  provide  a  basis  for  calculation.  The  second  type  of  calcu¬ 
lation  utilizes  data  on  the  stresses  on  various  components  of 
the  parachute  system  derived  from  instrumented  drop  tests  and 
data  on  the  strength  of  the  materials  from  which  the  component 
is  constructed  to  compute  the  probability  of  component  failure. 
The  third,  and  least  preferable,  approach  utilizes  engineering 
computations  on  the  expected  stresses  on  the  various  portions 
of  the  component,  together  with  the  data  on  the  strength  of  the 
component  materials,  to  compute  the  potential  failure  rate. 


3. 2. 2. 2  Operational  Term.  In  developing  a  method  for 
evaluating  the  operational  term,  the  parachute  deployment  pro¬ 
cess  was  studied,  considering  the  fact  that  the  reliability 
computations  represent  the  performance  of  the  parachute  system 
after  a  field  test  and  redesign  process  which  should  correct 
any  avoidable  operational  difficulties.  The  results  of  this 
work  indicate  that  what  are  here  called  operational  failures, 
in  field  use,  will  be  caused  by  human  error  in  the  parachute 
packing  process,  since  the  parachute  development  process-will 
result  in  a  product  which  will  function  properly  if  (1)  it  is 
used  under  its  design  conditions,  (2)  no  materiel  failures 
occur,  and  (3)  the  parachute  is  packed  properly.  The  basic 
assumptions  under  which  the  reliability  of  the  system  is 
studied  assume  that  condition  (1)  will  be  true.  Failures  due 
to  materials  (component  failures)  are  considered  separately. 
Thus,  from  a  practical  viewpoint,  the  operational  failure  term 
can  be  evaluated,  based  on  the  rate  of  human  error  in  the 
parachute  packing  process. 
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The  details  of  the  calculation  of  component  reliability 
by  each  of  the  three  methods,  and  the  computation  of  parachute 
packing  (operational)  reliability  are  covered  in  the  next 
section  of  this  report. 
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SECTION  4 


EVALUATION  OF  COMPONENT  RELIABILITY  MODEL 


The  problem  of  computing  "exact”  values  of  the  reliabil¬ 
ity  of  a  heavy-duty  parachute  system  with  any  type  of  a  model 
is  a  complex  one;  in  general,  to  obtain  "best"  estimates  of 
reliability  requires  extremely  heavy  computation.  However, 
mathematically  sound  techniques  of  approximation  exist,  which, 
if  properly  applied  to  the  component  reliability  model,  will 
yield  quite  satisfactory  estimates  of  reliability  with  a  sig¬ 
nificant  easing  of  the  computational  load.  The  latter  approach 
is  the  one  followed  in  the  subsequent  discussion. 


4 . 1  Selection  of  Component  Terms 


As  a  first  step  in  the  analysis  of  parachute  system  reli¬ 
ability  with  the  component  model,  the  complete  system  must  be 
subdivided  into  simpler  independent  component  systems,  each  of 
which  is  subject  to  reliability  analysis  as  a  unit.  The  esti¬ 
mates  of  component  reliabilities  thus  established  are  then 
combined  to  give  the  overall  reliability.  Of  course,  a  con¬ 
siderable  amount  of  judgment  must  be  applied  in  the  subdivision 
of  the  parachute  system  into  components;  the  minimum  number  of 
components  for  which  failure  rates  can  be  computed  is  the  most 
desirable  result.  The  components  chosen  should  be  independent 
entities  with  respect  to  their  possible  modes  of  failures  in 
the  use  of  the  system. 

Component  reliabilities  will  vary  over  a  broad  range; 
obviously  those  components  with  very  high  reliability  will  not 
affect  the  overall  reliability  of  the  system  to  any  significant 
degree  if  components  of  lower  reliability  are  also  present . 
(Since  the  numerical  values  of  reliability  may  range  from  zero 
to  unit,  it  is  obvious  that  the  lowest  component  reliabilities 
will  have  the  greatest  effect  on  the  overall  system  reliability. 
For  example,  if  the  system  is  composed  of  three  components  with 
reliabilities  of  .999,  .999,  and  .900  respectively,  the  overall 
reliability  —  .999  x  .999  x  .900  —  will  be  .898,  which  dif¬ 
fers  by  only  two  tenths  of  one  percent  from  the  value  for  the 
lowest  component,  .900.) 

It  is  obvious  that  a  parachute  system  will  have  a  rela¬ 
tively  large  number  of  components,  some  of  which,  such  as  the 
canopy,  will  have  a  large  number  of  subcomponents.  Any  of 
these  components  or  subcomponents  may  cause  failure  of  the 
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system  if  the  component  or  subcomponent  fails.  If  all  compo¬ 
nents  and  subcomponents  are  analyzed  for  reliability,  a  very 
large  amount  of  effort  is  required.  Much  of  this  may  be  eli¬ 
minated,  however,  by  a  preliminary  analysis  to  determine  the 
components  and  subcomponents  most  likely  to  fail  under  normal 
load.  These,  of  course,  will  have  the  lowest  reliability, 
while  the  components  which  are  least  likely  to  fail  will  have 
the  highest  reliability. 

Thus,  in  the  early  stages  of  the  analytical  effort,  the 
classification  of  all  components  of  the  system  into  two  major 
groups,  highly  reliable  and  less  reliable,  can  facilitate  the 
computation  of  the  overall  reliability  by  eliminating  many 
terms  which  do  not  contribute  materially  to  the  magnitude  or 
accuracy  of  the  final  result. 

It  is  not  possible  to  write  hard-and-fast  rules  for  the 
classification  of  parachute  system  components  in  this  process. 
The  experience  and  judgment  of  the  engineer  evaluating  the 
system  is  the  key  factor  in  making  such  decisions.  In  general 
failures  which  will  affect  mission  success  of  hardware  items, 
deployment  bags,  reefing  lines,  break  cords,  radial  canopy 
reinforcements,  and  some  other  components  (in  field-use,  pro¬ 
perly  packed  parachute  systems  used  under  their  design  condi¬ 
tions)  ,  appear  to  be  so  rare  as  to  be  generally  negligible, 
although  exceptions  may  occur  in  parachute  systems  of  unusual 
design.  On  the  other  hand,  consideration  of  the  failure  rates 
of  such  components  as  risers,  bridles,  suspension  lines,  reef¬ 
ing  line  cutters,  mechanical  disconnect  systems,  etc.  will 
probably  be  required  with  much  greater  frequency. 

The  optimum  procedure  recommended,  following  the  defini¬ 
tion  of  the  components  of  the  system,  is  a  preliminary  quali¬ 
tative  analysis  of  the  system  to  select  those  components  known 
to  be  very  highly  reliable  and  those  known  to  be  of  marginal 
reliability.  The  middle-range  components  can  then  be  subjected 
to  a  rough  quantitative  analysis  to  eliminate  other  highly 
reliable  items  from  consideration.  The  remainder  of  the  com¬ 
ponents,  and  those  deemed  marginal  by  solely  qualitative  con¬ 
siderations,  make  up  the  group  for  which  component  reliabili¬ 
ties  must  be  computed. 


4.2  Computation  of  Operational  Reliability 


To  illustrate  the  concept  of  reliability  and  its  computa¬ 
tion,  the  specific  concept  of  operational  reliability,  that 
is,  of  the  parachute  packing  reliability,  which  will  probably 
be  one  of  the  more  important  factors  in  the  overall  result, 
will  be  considered  here  in  detail.  Suppose  that  on  the  basis 
of  past  experience  with  parachutes  similar  to  the  one  under 
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study,  there  were  Fp  packing  failures  in  N  observed  parachute 
packings.  On  the  basis  of  these  empirical  data,  an  estimate 
of  the  reliability  of  packing  this  type  of  parachute,  to  be 
denoted  by  Rp,  is  desired.  The  maximum  likelihood  estimate 
of  Rp  is  given  by 


N  N 


However,  it  is  quite  possible  that  the  "true"  reliability 
(that  is,  the  reliability  for  a  very  large  number  of  packings) 
is  either  less  or  greater  than  this  maximum  likelihood  esti¬ 
mate.  To  handle  this  situation,  a  more  refined  measure  of 
reliability  is  needed.  Roughly  speaking,  if  an  estimate  of 
the  reliability  of  a  system  is  made,  there  is  associated  with 
that  estimate  a  probability  of  the  estimate  being  incorrect. 

The  lower  the  estimate  of  the  reliability  (expressed  as  a 
probability  of  "at  least"  a  given  fraction  of  successes),  the 
higher  is  the  probability  of  the  estimate  being  correct.  The 
estimate  of  the  reliability  will  be  denoted  in  the  present 
case  by  Rp  the  probability  of  the  estimate  being  correct 
will  be  called  the  confidence  coefficient  (denoted  by  g) .  A 
probabilistic  interpretation  of  these  concepts  is  that  if  in 
many  empirical  studies  with  Fp  failures  out  of  a  total  of  N 
cases,  the  reliability  is  estimated  to  be  at  least  Rp,g,  then 
the  estimate  will  be  correct  on  the  average  of  at  least  g 
(percent)  of  the  time.j?!/ 

In  order  to  compute  Rrj  g,  it  must  be  recalled  that  if  the 
"true"  reliability  is  R,  tnen  in  a  single  packing  the  probabil¬ 
ity  of  failure  is  (1-R)  and  the  probability  of  success  is  R. 
Using  the  binomial  distribution,  the  probability  of  Fp  or  less 
failures  in  N  packings  is  given  by 


_ _  (1-R)^  R^  ^  (3) 

i.'  (N-i): 


V  In  the  literature,  the  concept  is  usually  stated  in  terms 
of  the  statement  being  correct  on  the  average  of  exactly 
g  (percent)  of  the  time;  the  modification  here  presented 
is  for  purposes  of  flexibility  in  using  approximations. 


i=o 
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As  R  decreases,  the  expression  in  formula  (3)  also  de¬ 
creases.  The  estimate  Rp,g  will  be  that  value  of  R  which 
causes  formula  (3)  to  be  tjqual  to  1-g,  for  then  the  probabil¬ 
ity  of  obtaining  more  than  Fp  failures  in  N  tests  will  be  g. 
If  Fp  is  small  while  N  is  large  (that  is,  if  there  are  not 
many  packing  failures  in  a  large  number  of  parachute  uses) , 
the  Poisson  approximation  to  the  binomial  distribution  may 
be  used.  This  may  all  be  summarized  by  the  equation 


- Sli _  (1-R)^  R^"^  (4a) 

i.'  (N-i).' 


i=o 


i=o 


Ni_(l-R)ije-N(l-R) 

i  ! 


(4b) 


When  Rp,g  is  computed  from  equation  (4),  it  is  then  possible 
to  state  that  the  reliability  lies  between  Rp^g  and  1  with 
the  assurance  of  being  correct  given  by  the  confidence  co¬ 
efficient  g. 


To  facilitate  computation  of  R  to  a  given  confidence  co¬ 
efficient,  Table  I  may  be  used.  The  value  in  the  table  for 
the  observed  number  of  failures  in  the  column  headed  by  the 
desired  confidence  coefficient  is  divided  by  the  total  number 
of  trials  to  obtain  the  expected  failure  rate.  Subtracting 
this  rate  from  unity  gives  the^  desired  reliability  at  the 
confidence  coefficient  used.^l^^ 


Further  discussion  of  parachute  packing  reliability  and 
the  results  of  the  analysis  of  available  parachute  packing 
failure  data  by  these  methods  are  presented  in  Appendix  A. 


♦/  It  should  be  noted  that  the  values  given  in  Table  I  are 
""  based  on  the  approximate  form.  Equation  4b.  Thus,  it  is 
applicable  to  cases  in  which  ten  or  more  items  are  tested, 
and  in  which  the  ratio  of  failures  to  trials  is  no  greater 
than  0.2  (not  more  than  2  failures  in  10  trials).  Beyond 
this  limit  the  exact  form,  Equation  4a,  should  be  used.  . 
Tables  are  available  to  facilitate  such  computations 
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Table  I.  Table  of  Values  for  Computing  Reliability  to  a 
Selected  Confidence  Coefficient  From  a  Series 
of  Trialsi®/ 


No. of  Confidence  Coefficient 


Fail¬ 

ures 

1  90% 

94% 

95% 

.  96% 

.5% 

97 

.5% 

98% 

.7% 

99% 

0 

2 

.28 

2 

.94 

3 

.00 

1  3 

.22 

3 

.37 

3 

.68 

3 

.  87 

4 

.36 

4 

.58 

1 

3 

.89 

4 

.68 

4 

.74 

5 

.02 

5 

.19 

5 

.  56 

5 

.79 

6 

.36 

6 

.61 

2 

5 

.32 

6 

.22 

6 

.30 

1  6 

.61 

6 

.  80 

7 

.21 

7 

.46 

8 

.10 

8 

.38 

3 

6 

.68 

7 

.67 

7 

.75 

p  8 

.09 

8 

.30 

8 

.75 

9 

.03 

9 

.71 

10 

.0 

4 

7 

.  99 

9 

.07 

9 

.15 

9 

.52 

9 

.74 

10 

.2 

10 

.  5 

11 

.2 

11 

.6 

5 

9 

.28 

10 

.4 

10 

.5 

10 

.9 

11 

.1 

11 

.6 

12 

.0 

12 

.  8 

13 

.1 

6 

10 

.  5 

11 

.  8 

11 

.  8 

12 

.2 

12 

.  5 

13 

.0 

13 

.4 

14 

.2 

14 

.5 

7 

11 

.  8 

13 

.0 

13 

.2 

13 

.6 

13 

.  8 

14 

.4 

14 

,7 

15 

.7 

16 

.0 

8 

13 

.0 

14 

.3 

14, 

.4 

14 

.9 

15 

o 

15, 

O 
.  o 

16, 

.  1 

17, 

,0 

17, 

.4 

9 

14, 

,2 

15. 

,6 

15. 

.  8 

16. 

.2 

16, 

.  5 

17, 

,  1 

17, 

,  5 

18. 

,4 

18, 

,  8 

10 

15. 

,4 

16. 

,9 

17. 

0 

17. 

.  5 

17. 

.  8 

18, 

.4 

18, 

8 

19, 

,7 

20. 

1 

11 

16. 

,6 

18. 

,1 

18. 

2 

18. 

,8 

19. 

.0 

19. 

,7 

20. 

1 

21. 

0 

21. 

5 

12 

17. 

8 

19. 

4 

19. 

5 

20. 

0 

20. 

3 

21. 

0 

21. 

4 

22. 

4 

22. 

8 

13 

19. 

0 

20. 

6 

20. 

7 

21. 

2 

21. 

6 

22  . 

2 

22. 

7 

23. 

7 

24. 

1 

14 

20. 

2 

21. 

8 

21. 

9 

22. 

5 

22  . 

8 

23. 

5 

.23. 

9 

25. 

0 

25. 

5 

15 

21. 

3 

23. 

0 

23. 

1 

23. 

7 

24. 

0 

24. 

8 

25. 

2 

26. 

3 

26. 

7 

16 

22  . 

5 

24. 

2 

24. 

3 

24. 

9 

25. 

2 

26. 

0 

26. 

4 

27. 

6 

28. 

0 

17 

23. 

6 

25. 

4 

25. 

5 

26. 

1 

26. 

5 

27. 

2 

27. 

7 

28. 

8 

29. 

3 

18 

24. 

8 

26. 

6 

26. 

7 

27. 

3 

27. 

7 

28. 

5 

28. 

9 

30. 

0 

30. 

6 

19 

25. 

9 

27. 

8 

27. 

9 

28. 

5 

28. 

9 

29. 

7 

30. 

1 

31. 

3 

31. 

8 

20 

27. 

0 

28. 

9 

29. 

1 

29. 

7 

30. 

1 

30. 

9 

31. 

4 

32. 

6 

33. 

1 

1  -  Table  Value  _  Reliability  at  Chosen  Confidence  Coefficient 
No.  of  Trials 
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4 . 3  Computation  of  Component  Reliability 


The  other  type  of  factor  in  the  model  from  which  the 
overall  result  is  calculated  represents  the  reliability  of 
specific  components,  to  be  denoted  by  .  It  is  safe  to 
assume  that  Rp  and  Rc  are  independent  of  one  another,  so  that 
each  may  be  considered  by  itself.  As  an  example  of  a  major 
component,  the  parachute  canopy,  including  the  suspension 
lines  may  be  used.  If  the  canopy  under  analysis  (or  any  other 
component  of  the  parachute  system)  is  used  in  another  para¬ 
chute  system  for  which  an  adequate  body  of  test  or  use  data 
are  available,  the  analysis  of  the  component  reliability  for 
the  desired  confidence  coefficient  chosen,  proceeds  as  des¬ 
cribed  above  for  packing  reliability. 

If  use  or  test  data  are  not  available  for  the  specific 
component,  an  alternate  method  of  analysis  is  required.  Again, 
taking  the  canopy  as  an  example,  it  can  be  seen  that  the  canopy 
consists  of  several  sub-components,  such  as  the  canopy  fabric 
(or  ribbons) ,  the  vent  band,  the  skirt  band,  the  suspension 
lines,  etc.  Hence,  the  canopy  can  be  considered  as  a  corabir 
nation  of  subsystems  in  series  (in  a  probability  sense) .  If 
no  data  are  available  from  which  the  reliability  of  the  com¬ 
plete  canopy  can  be  calculated,  it  will  be  necessary  to 
analyze  the  reliability  of  the  canopy  subcomponents.  Some 
simplification  of  this  task  may  be  effected  by  preliminary 
analysis  of  subcomponents  to  eliminate  consideration  of  those 
of  very  high  reliability  (see  above) .  To  simplify  subcompo¬ 
nent  analysis  further,  the  subcomponents  which  must  be  anal¬ 
yzed  may  be  treated  as  components  of  the  complete  system 
directly,  and  be  repr'jsented  by  individual  Rc  terms  in  the 
overall  system  reliability  model,  Equation  (1). 


4.3.1  Use  of  Instrumented  Test  Results  and  Materials 
Sti*ength  Data 


In  the  analysis  of  the  reliability  of  parachute  components 
(or  subcomponents)  for  which  an  adequate  number  of  tests  are 
not  available,  the  preferred  method  is  the  one  utilizing  the 
results  of  instrumented  drop  tests  on  actual  parachutes  which 
provide  load  data  on  the  components  of  interest,  together  with 
the  results  of  tensile  strength  tests  on  the  materials  from 
which  the  parachute  is  fabricated. 

Unfortunately,  in  practical  cases,  the  available  instru¬ 
mented  test  data  on  the  parachute  component  for  use  with  the 
materials  strength  distribution  data  will  usually  be  based 
upon  very  few  tests.  However,  the  application  of  the  Non- 
Central  t -Distribution'^ to  the  instrumentation  and  materials 
strength  data  will  allow  the  computation  of  component 
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reliabilities  and  their  associated  confidence  coefficients  with 
a  degree  of  precision  adequate  for  the  analysis.  The  types  of 
data  required  and  the  methods  of  computation  are  discussed 
below;  the  mathematical  derivations  are  .presented  in  Appendix 
C. 


The  materials  of  construction  used  in  parachutes  are  pro¬ 
duced  in  relatively  large  quantities  by  machine  production 
methods,  using  yarns  produced  in  similar  (or  larger)  quantities 
by  other  machine  methods.  The  final  products  (webbings,  cords, 
tapes,  cloths,  etc.)  are  inspected  and  teste'd,  generally  more 
than  once,  and  defective  materials  rejected.  Under  such  cir¬ 
cumstances  it  might  be  expected  that  the  various  batches  of 
materials  produced  would  be  uniform  in  strength,  or  nearly  so. 


In  practice,  however,  materials  tests  indicate  that  there 
is  an  appreciable  batch-to-batch  variation  in  break  strength 
of  the  various  fabric  items  used  in  parachute  construction. 
Investigation  of  the  results  of  tensile  strength  tests  on  a 
number  of  parachute  materials  (see  Appendix  B)  indicates  that 
the  distribution  of  strength  for  all  of  these  materials  is 
essentially  normal.  That  is,  if  a  large  number  of  samples, 

N,  are  tested  and  the  results  plotted  as  a  graph,  a  symmetri¬ 
cal  bell-shaped  curve  similar  to  that  in  Figure  3  will  be 
obtained.  The  mean  (average)  value,  x,  of  the  break  strength 
(x)  corresponds  to  the  peak  of  the  curve.  The  actual  shape 
of  the  curve  is  determined  by  the  spread  of  the  values  observed, 
which  can  be  measured  by  the  standard  deviation,  s^: 


(5) 


Study  of  the  results  of  instrumented  parachute  drop  tests, 
and  consideration  of  the  processes  by  which  the  loads  measured 
are  generated,  indicate  that  these  values  are  also  distributed 
approximately  normally.  Thus,  in  the  following  discussion  it 
will  be  assumed  that  both  the  load  values  and  the  materials 
break  strength  data  are  distributed  normally. 

Let 

X  =  sample  mean  of  the  break  strength  tests  (with 

allowance  for  sewing,  etc.  —  see  following  sections) 

Sjj  =  sample  standard  deviation  of  the  break  strength 
tests  (with  corrections  for  multiple  layers  — 
see  following  sections) 
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Figxire  3.  Shape  of  the  Noraal  Curve. 


Nx  =  number  of  break  strength  tests 

f  =  number  of  degrees  of  freedom  of  break  strength 
tests  =  Njj  -  1 

y  =  sample  mean  of  the  loads  of  the  instrumented  drop 
tests 

Sy  =  sample  standard  deviation  of  the  instrumented  drop 
^  test  loads  (see  Equation  5) 

Ny  =  number  of  instrumented  drop  tests 

fy  =  number  of  degrees  of  freedom  of  instrumented  drop 
tests  =  Ny  -  1 


The  convention  is  established  that  the  set  of  data  with 
the  smaller  standard  deviation  is  considered  as  si,.  Ni  and  fi 
in  the  following,  with  the  other  set  designated  S2 ,  N2  and  i2- 


Then,  define 

z  =  X  -  y 
s 


(6) 


^/  Sx2 

+  Sy2 

Si^  + 

<5  2 

_ 

^  2 

c  2 

®1 

®2 

Nl  ' 

N2 

=i  2 
®1 

s^2 

N2 

Nl 

(®x^  + 

=  20 

4 

„  4 

Sx 

Sy 

—  + 

fx 

1  +  r 

1  +  er 


^2 


(1  +  r)^ 

1  +  gr^ 


(7) 

(8) 


(9) 

(10) 

(11) 
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g 


(12) 


(13) 


Then,  for  a  given  confidence  coefficient,  g,  the  use  of  the 
graphs  of  the  Non-Central  t-Distribution  (Figures  4,  5,  and 
6) ,  or  of  the  tables  in  Appendix  C  with  the  computed  values 
of  X  and  f  (Equations  11  and  13)  allows  the  determination  of 
a  factor  K.  Substitution  of  this  value  in 


=  K  •/UlJ:  (14) 

V  N 

allows  calculation  of  a  value  of  -^/o-  with  which  to  enter  the 
table  of  Normal  Distribution,  Table  II,  to  find  the 

desired  reliability.  Having  computed  Rc  g,  the  statement  can 
be  made  that  the  component  reliability  lies  between  Rc,g  and 
1  with  the  assurance  of  being  correct  given  by  g. 

The  computation  of  overall  reliability  to  a  pre-selected 
confidence  coefficient  requires  that  the  component  reliability 
terms  be  computed  to  confidence  coefficients  which  will  give 
the  desired  result  in  the  final  calculations  (see  paragraph 
4.4  below).  However,  tables  of  the  Non-Central  t-Distribution 
are  available  for  the  computation  of  reliabilities  to  only  a 
limited  group  of  confidence  coefficients  in  the  range  of 
interest:  90%,  95%  and  99%. 

If  values  intermediate  to  these  are  required,  it  will  be 
necessary  to  interpolate  graphically  for  the  desired  confidence 
coefficient.  The  simplest  method  is  to  compute  reliability  of 
the  component  at  each  of  the  three  confidence  coefficients, 
plot  the  reliability  values  against  the  confidence  coefficients, 
and  interpolate  for  the  reliability  at  the  desired  confidence 
on  the  graph.  An  example  of  this  process  is  given  in  Section 
5. 


In  applying  the  above  technique  to  the  computation  of 
parachute  component  reliability,  it  should  be  noted  that  the 
mean  and  standard  deviation  of  the  instrumented  drop  test 
results  must  be  divided  among  the  number  of  load-bearing  mem¬ 
bers  under  consideration  when  a  group  of  subcomponents  share 
the  load.  Thus,  it  is  necessary  to  determine  the  mean  load 
per  line  and  the  standard  deviation  per  line  (x/Z  and  s^^/Z 
where  Z  =  number  of  suspension  lines) . 
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WADO  TR  60-200  Figure  4.  Plot  of  Percentage  Points  of  the  Non-Central  t-Dis tribution ,  00%  Confidence 


% 


SSSjSSSMHiSHaSSSBBBBBanBSSSSB 

»'«SSHSi!iSB!S8S8ESSBSEniin|a||ii 

aBBS88S8SE8^^^^  _ _ _ 

BBKSiajBBiiaiBaHBBBBBBBBBBBBBBBBBBBBBBBBBBaBBBaBBBl 


««aBl»gS!iBaS«BlglHBBBBBBiaBBiBBBBBBBBBSBBB8BB8SS88SBSSI 

KBKWBBS^SilSasaBSIBBKBliilMBHIir 
BHlNKraSK^^OBBKKBliMBBKIBinBI 

BBBB!«!«BISim'Biliaii!MiBaipHBB1iBBBBBBBBBBBBBBBBiBBBBBl 

BBBBSSBBBi^SSBBBBBBBilklBBBaBBBiBBBBBBBBBBBiBBBBBBl 

— IBBK»KKW)KS!!K«KnBBBKnm!BBBBBBBBBBBBaBBBI - 

- - IBIBIBIBII 

i8888888888B8888i 

_ MBBBBBBBI 

_ _ i»8fligiiiaBiliiiBiBBBiBiliiaiiBil 

iSBNISB.^99KNH!KiniaBBiBBiBBBBBBBBBEiBBBi| 

IKte««lilfiiSSf!K)K«iBna»HBBBBI 
IBISBeeiBiiSiv^iQOISBBaBnBBBI 

IBBB»B!K$S!9!iNBfli!KHHBBBBI 

- 

_ ^ _ IBBBBKKBlKv^NaSliiiiKBBnBBI 

iBlflBBBBBBBBBBBBKlKBSISSs^^SSBBBBBBBBI 

B8B8S88B8888B88BSniB^^^ 

- IBBBBBKagWl&v^SiSSBWBaaBBMaBlWI 

_ _ _ IBBBBflBSSSBS^^i^BBBiiHBiBBflBBI 

|BBBBflaBBBBBBBflBBBBflBK!e(AX!$^'W!KKBBB0HBBBB*l _ 

|BBBBBBBiBBBBBBBiBBBBBKS(KK^'^j»0!K«BiaBNiBBBBBBBBBI 

- IBi¥Nl^v^$N'99»iKKI9KBBBBBBBBBBBB 

IBBiSSBfi^^BlKBBaBaBBBBBBBBBBB 
IBBfiii9B.^;$S»i9ia!i!KVBBBBBBBBBBB 
IBBaSS$9iSI£«i^BBBaBBBBBBBBir~ 
- IBK^NK^v^'aSiNBHaiipSBBBBBBBI 

BB^».^.^^i9BBBBHBBBBBI 

BBBiS8i^’^^99fllB«BBBBBBI 
BBB^SSiK^^iijSSSBBflliiaBBBBI 
BBBB&!S9(!ii.^'mBa»iaBBBL^, 
K^SSi^!^'!$SSSH!BBnBBBBB| 
■B.!SS».\^^SM»9ISlBBr~ 
■■Bv^'|K^'««ai»HBBI 

IBBBBB^.V^j^'BOiKBB 
liEBBBB^S&^>'^m!KBni 

nm  ''^'iSSSSMKB 

_ 

BIHBBBBBBBBBIB|BiBIBBk'^v'''^^'« 
flBBBBBBBBBBBBIflBiBBflBBBBli^. 
BBBBBBBBBBBBBiBBBBBBBBBBi^^ 
BBBBBBBBBiBBBBBBflBBBB^S^ 

_  bbbbbibbEibbbbbibbbbbb^'^^ 

BB—BBBBBBBBBBBBMBBBBBBBBBBw'^ 
BIBBBBBlBiBBBBBIBBBIBBBflBBBB 
BIBBBBBBBBBBBfll 


BSBBBBBBBBmr™"" 


BBBHHHjnBmiSliiiiKK 

■■■MaHniiniMSfiBinis 


isaSnmm'KaKnBnnialM  _ 

l8MBMaBS88aMSS8B8aBSaBa8P888a 

iiP^»HS»iSim!i!mHnp»HnHiPinHPPPPPPPPP 

Kmoipii!!8e9PiK«as8PPzr - 

■raiiliilSSSNSSailSWBKIKHI _ 

BiiBiBmjKgMMMaaMPHKBHBWI 
~i!8]a«BnS!S!Si3aPnSK88Bi:ZZZl'^ _ 

1K«SI9IP»SSP9KNHnnPnHanBPBBPBBPBP 
■BKKVlSSSKBKnBBKKBBKBHIBBBBBBBB 


IHBBBBBBBBBBBBBB 

SSSGffiHSBBa 

SSSSBGIliBIBa 


,  _  jnjSGBBaSSSaSSBBBa 

EBBBBBBBBBBBBliiWSSSSBSSBBB 


laBBIL^iSSiBffiBBHBBBill _ . 

■SiBHaS^'iKiSBBnnnKBBBBBl 

■KifiiBSmaBRBIBBBBni - 

■BKS!aBi.^^!S!Nai!nBnKIKL. 
BI8iBaBB»BB!HBHBBni 


BBBBBBaiBflflBflBflBHBBBBBBBBBBBBBBBBBBBflBBflBBBI 

BBBiBiBflBBiilBBBBBBBflBflBiiiBBBBBBilBBBBBBBI 

BBBEBiBflBBEiiBBBBn8BBflflBBiBEBBBBBBilBBBBBflBI 


iBSiBGaS 

- BSSr^^SSBl 

. 

nii«vT 


■B8niBBiBBBBBBBflflflBBBBBBBBBBBBBBBBBB 

WflBBBEBflBElflBflBfliBBiiBBBBBBBBBBBBB 


WADO  TR  60-200  Figure  6.  Plot  of  the  Percentage  Points  of  the  Kon-C^ntral  t-Distri 


Table  II. 

Table  of 

the  Normal 

Distribution 

M. 

Relia¬ 

zc 

Relia¬ 

AJ. 

Relia¬ 

<r 

bility 

(r 

bility 

(T 

bility 

1.00 

.  8413 

1.35 

.9115 

1.70 

.9554 

1.01 

.  8438 

1.36 

.9131 

1.71 

.9564 

1.02 

.8461 

1.37 

.9147 

1,72 

.9573 

1.03 

.8485 

1.38 

.9162 

1.73 

.9582 

1,04 

.  8508 

1.39 

.9177 

1.74 

.9591 

1.05 

.8531 

1.40 

.9192 

1.75 

.9599 

1.06 

.  8554 

1.41 

.9207 

1.76 

.9608 

1.07 

.  8577 

1.42 

.  9222 

1.77 

.9616 

1.08 

.  8599 

1.43 

.9236 

1.78 

.9625 

1.09 

.  8621 

1.44 

.  9251 

1.79 

.9633 

1.10 

.  8643 

1.45 

.  9265 

1. 80 

.  9641 

1.11 

.  8665 

1.46 

.  9279 

1.81 

.9649 

1.12 

.  8686 

1.47 

.  9292 

1.82 

.  9656 

1.13 

.  8708 

1.48 

.  9306 

1.83 

.9664 

1.14 

.  8729 

1.49 

.  9319 

1.84 

.9671 

1.15 

.  8749 

1.50 

.  9332 

1.85 

.  9678 

1.16 

.  8770 

1.51 

.  9345 

1.86 

.9686 

1.17 

.  8790 

1.52 

.  9357 

1.87 

.  9693 

1.18 

.  8810 

1.53 

.  9370 

1.88 

.  9700 

1.19 

.8830 

1.54 

.9382 

1.89 

.  9706 

1.20 

.  8849 

1.55 

.9394 

1.90 

.9713 

1.21 

.8869 

1.56 

.9406 

1.91 

.9719 

1.22 

.  8888 

1.57 

.9418 

1.92 

.9726 

1.23 

.  8907 

1.58 

.9430 

1.93 

.9732 

1.24 

.  8925 

.1.59 

.  9441 

1.94 

.9738 

1.25 

.  8944 

1.60 

.  9452 

1.95 

.  9744 

1.26 

.  8962 

1.61 

.9463 

1.96 

.9750 

1.27 

.  8980 

1.62 

.  9474 

1.97 

.9756 

1.28 

.  8997 

1.63 

.9485 

1.98 

.9762 

1.29 

.  9015 

1.64 

.9495 

1.99 

.9767 

1.30 

.9032 

1.65 

.9505 

2.00 

.  9773 

1.31 

.  9049 

1.66 

.9515 

2.01 

.9778 

1.32 

.9066 

1.67 

.  9525 

2.02 

.9783 

1.33 

.  9082 

1.68 

.  9535 

2.03 

.9788 

1.34 

.  9099 

1.69 

.9545 

2.04 

.9793 

(Continued) 
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Table  II.  (Continued)  Table  of  the  Normal  Distribution 


-4^ 

Relia¬ 

AJU 

Relia¬ 

Relia¬ 

(T" 

bility 

(T 

bility 

c- 

bility 

2.05 

.9798 

2.40 

.9918 

2.75 

.9970 

2.06 

.9803 

2.41 

.9920 

2.76 

.  9971 

2.07 

.9808 

2,42 

.9922 

2.77 

.9972 

2.08 

.9812 

2.43 

.9925 

2.78 

.9973 

2.09 

.9817 

2.44 

.  9927 

2.79 

.  9974 

2.10 

.9821 

2.45 

.9929 

2. 80 

.9974 

2.11 

.  9826 

2.46 

.9931 

2.81 

.9975 

2.12 

.9830 

2.47 

.  9932 

2.82 

.9976 

2.13 

.9834 

2.48 

.  9934 

2.83 

.9977 

2.14 

.9838 

2.49 

.9936 

2.84 

.9977 

2.15 

.9842 

2.50 

.9938 

2.85 

.9978 

2.16 

.  9846 

2.51 

.  9940 

2.86 

.  9979 

2.17 

.9850 

'  2.52 

.9941 

2.87 

.  9980 

2.18 

.  9854 

2.53 

.9943 

2.88 

.9980 

2.19 

.9857 

2.54 

.  9945 

2.89 

.9981 

2.20 

.9861 

2.55 

.  9946 

2.90 

.9981 

2.21 

.9865 

2.56 

.9948 

2.91 

.  9982 

2.22 

.9868 

2.57 

.9949 

2.92 

.9983 

2.23 

.9871 

2.58 

.9951 

2.93 

.9983 

2.24 

.9875 

2.59 

.  9952 

2.94 

.9984 

2.25 

.9878 

2.60 

.9953 

2.95 

.9984 

2.26 

.9881 

2.61 

.9955 

2.96 

.9985 

2.27 

.9884 

2.62 

.9956 

2.97 

.  9985 

2.28 

.9887 

2.63 

.9957 

2.98 

.9986 

2.29 

.9890 

2.64 

.  9959 

2.99 

.9986 

2.30 

.9893 

2.65 

.9960 

3.00 

.9987 

2.31 

.9896 

2.66 

.9961 

3.01 

.9987 

2.32 

.9898 

2.67 

.9962 

3.02 

.9987 

2.33 

.9901 

2.68 

.  9963 

3.03 

.9988 

2.34 

.9904 

2.69 

.9964 

3.04 

.  9988 

2.35 

.  9906 

2.70 

.9965 

3.05 

.9989 

2.36 

.9909 

2.71 

.9966 

3.06 

.  9989 

2.37 

.9911 

2.72 

.  9967 

3.07 

.  9989 

2.38 

.9913 

2.73 

.9968 

3.08 

.  9990 

2.39 

.9916 

2.74 

.9969 

3.09 

.9990 

(Continued) 
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Table  II.  (Continued)  Table  of  the  Normal  Distribution 


M. 

Relia¬ 

M. 

bility 

cr 

3.10 

.9990 

3.45 

3.11 

.9991 

3.46 

3.12 

.9991 

3.47 

3.13 

.9991 

3.48 

3.14 

.9992 

3.49 

3.15 

.9992 

3.50 

3.16 

.9992 

3.51 

3.17 

.9992 

3.52 

3.18 

.  9993 

3.53 

3.19 

.9993 

3.54 

3.20 

.9993 

3.55 

3.21 

.9993 

3.56 

3.22 

.9994 

3.57 

3.23 

.9994 

3.58 

3.24 

.9994 

3.59 

3.25 

.9994 

3.60 

3.26 

.9994 

3.61 

3.27 

.9995 

3.62 

3.28 

.9995 

3.63 

3.29 

.9995 

3.64 

3.30 

.9995 

3.65 

3.31 

.9995 

3.66 

3.32 

.9996 

3.67 

3.33 

.9996 

3.68 

3.34 

.9996 

3.69 

3.35 

.9996 

3.70 

3.36 

.9996 

3.71 

3.37 

.9996 

3.72 

3.38 

.9996 

3.73 

3.39 

.9997 

3.74 

3.40 

.9997 

3.75 

3.41 

.9997 

3.76 

3.42 

.9997 

3.77 

3.43 

.9997 

3.78 

3.44 

.9997 

3.79 

Relia¬ 

Relia¬ 

bility 

cr 

bility 

.  9997 

3. 80 

.9999 

.9997 

3.81 

.9999 

.  9997 

3.82 

.9999 

.9998 

3.83 

.9999 

.9998 

3.84 

.9999 

.9998 

3.85 

.9999 

.9998 

3.86 

.9999 

.9998 

3.87 

.9999+ 

.9998 

and 

.9998 

up 

.9998 

.9998 

.9998 

.9998 

.9998 

.9998 

.9999 

.9999 

.9999 

.9999 

.9999 

.9999 

.9999 

.9999 

.9999 

.9999 
.9999 
.9999 
.9999 
.  9999 

.9999 
.  9999 
.9999 
.  9999 
.9999 
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Of  course ,  the  use  of  this  procedure  assumes  that  the 
load  is  equally  divided  among  all  the  suspension  lines.  No 
data  are  available  at  the  present  time  with  which  to  verify 
this  assumption.  However,  a  test  program  to  determine  the 
distribution  of  loads  in  the  suspension  lines  of  a  heavy  duty 
parachute  canopy  is  now  being  planned  by  WADD  (May  I960). 

Should  the  results  of  this  study  indicate  a  significantly 
uneven  load  distribution,  the  maximum  expected  load  per  line 
should  be  used  here. 

The  rationale  upon  which  the  above  technique  is  based  can 
be  explained  as  follows.  Let  the  break  strength  x  be  a  random, 
normally  distributed  variable  with  mean,xix»  variance  Cx^- 

Similarly,  let  the  load  y  have  mean,  and  variance 

Define  the  variable  x  -  y  as  the  difference  between  the%ean 
break  strength  and  the  mean  load.  In  terms  of  x  -  y,  success 
or  failure  of  a  particular  mission  is  expressed  by  x  -  y  >  0, 
or  X  -  y  <  0 .  Hence  the  probability  of  success  is  simply  the 
probability  that  x  -  y  >  0. 

with  mean 
the  estimator 
ng  the  Non- 

Central  t-Distribution,  the  probability  that  x  -  y  >  0  can  be 
estimated.  Appendix  C  presents  further  details  on  the  mathe¬ 
matical  basis  for  the  method. 

As  an  example  of  the  application  of  this  method,  the  cal¬ 
culation  of  the  reliability  of  the  suspension  lines  of  a  para¬ 
chute  canopy  from  the  g-load  data  at  opening  shock  and  the 
break  strength  of  the  suspension  line  webbing  may  be  considered. 

It  will  be  assumed  that  the  accelerometer  readings  from 
a  series  of  ten  instrumented  drop  tests  of  a  canopy  with  72 
suspension  lines  are  available.  For  each  drop  the  vector  sum 
of  the  3-axis  accelerometer  readings  corresponding  to  the  load 
at  opening  shock  is  computed  (the  square  root  of  the  sum  of 
the  squares  of  the  three  readings) .  The  mean  (average)  accele¬ 
ration  is  assumed  to  be  3.14  g's,  with  a  standard  deviation 
of  1.30  g’s  and  a  load  weight  of  6730  pounds. 

The  mean  load  per  line  is  294  pounds,  with  a  standard 
deviation  of  122  pounds  per  line.  The  webbing  in  the  suspen¬ 
sion  lines,  as  a  result  of  30  break  tests,  is  found  to  have  a 
sample  mean  strength  of  1110  pounds  (after  deducting  20%  for 
sewing  —  see  below) ,  with  a  sample  standard  deviation  of  218 
pounds.  Thus,  the  data  needed  to  compute  X  and  f  for  use  in 
the  Non-Central  t-Distribution  Graphs  (Figure  4,  5,  and  6) 
are : 


The  values  of  x  -  y  are  normally  distributed 
and  variance  ~  tr  ^  /t-2 

X  -  y  may  j. ux’ A*,  itiiu 


-  M. 


.Hence 


•y  UXAU  »  — J.  ~  —  ^  0~y  ,  , 

be  used  for  m  and  Sx"’^  +  Sy  for  0"^ .  Usi 
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Material 

Load 

per  Line 

X  =  1110 

y 

294 

s^2  ^  47,524 

s  2  - 

Sy 

14,884 

Nx  =  30 

Ny  = 

10 

fx  =  29 

II 

>> 

9 

Since  the  variance  of  the  load  data  is  the  smaller,  the 
load  data  are  used  as  Sj^,  N]^,  and  f-i.  From  equations  8,  9, 
10,  11,  12  and  13  it  is  found  that  N  =  20.3,  f  =  38.0,  and 
X  =  2.39.  Using  these  values  in  Figure  6,  K  is  found  to  be 
1.66  for  a  99%  confidence  coefficient.  From  equation  14, 

M~ /<r  =  2.30;  using  this  value  in  Table  II,  the  reliability  is 
found  to  be  .9893,  with  a  confidence  of  99%. 

4. 3. 1.1  Effect  of  Seams  on  Materials  Strength.  At  this 
point  an  additional  factor  affecting  materials  strength  must 
also  be  considered;  parachutes  are  constructed  by  sewing,  and 
the  seams  have  a  definite  effect  upon  the  strength  of  fabric 
materials.  Studies  of  the  effects  of  seams  on  the  strength 
of  parachute  webbing,  cords  and  cloths  (nylon)  indicate  that 
the  seam,  weakens  the  sewed  member  by  about  20%  overall . 

Thus,  the  mean  material  strength  should  be  reduced  by  20% 
before  the  computation  of  failure  probability  is  made. 


4.3. 1.2  Effect  of  Multiple  Layers  of  Materials.  Many 
parachute  components  are  constructed  of  more  than  one  layer 
of  a  single  webbing  or  tape  sewed  together  to  increase  strength. 
The  mean  strength  of  such  a  member  may  be  taken  as  the  sum  of 
the  strength  of  the  individual  portions,  reduced  by  20%  to 
allow  for  the  fact  that  they  are  sewed  together. 

The  standard  deviation  of  this  combined  strength  will  be 
greater  than  the  standard  deviation  of  the  single  member.  In 
general,  since  the  multiple  layers  of  fabric  in  the  component 
were  probably  taken  from  the  same  batch  of  material  during 
parachute  manufacture,  it  must  be  assumed  that  the  standard 
deviations  of  the  combined  layers  will  tend  to  be  equivalent 
to  the  standard  deviation  of  the  individual  layers  multiplied 
by  the  square  root  of  the  number  of  layers.  In  such  a  case, 
it  can  be  shown  that  for  N  layers,  each  of  standard  deviation 
s  and  mean  strength  x,  the  combined  strength  will  be  approxi¬ 
mately  0  .  8  •  N’x  (allowing  for  seams),  with  a  standard  deviation 
of  sVn. 
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4, 3. 1.3  Other  Factors  Affecting  Materials  Strength.  The 
strength  of  nylon  fabrics  is  affected,  to  some  extent,  by 
environmental  exposure  to  extremes  of  temperature  and  humidity, 
to  sunlight,  to  fume-laden  atmospheres,  and  by  previous  his¬ 
tory  of  extreme  stresses  which  cause  fatigue.iz/ 

In  general,  protracted  and  extreme  environmental  exposures 
are  required  to  cause  significant  changes  in  the  strength  of 
the  nylon  webbings,  tapes,  cords,  etc.  used  in  heavy-duty  para¬ 
chute  construction.  The  handling  and  packing  requirements  for 
such  parachutes  and  the  fact  that  the  packed  parachutes  are 
sealed  in  containers,  generally  with  dessicants,  are  all  pointed 
toward  avoiding  such  exposure.  Thus,  it  is  not  believed  neces¬ 
sary  to  make  any  allowance  for  fabric  strength  reduction  due 
to  exposure  to  environments,  natural  or  induced,  in  computing 
component  reliability. 


Weakening  of  load-bearing  fabric  members  by  fatigue  may 
be  a  problem  with  parachute  systems  which  are  used  more  than 
once.  The  heavy-duty  parachute  systems  under  consideration 
herein,  however,  are  single  use  systems.  The  only  possible 
mechanism  by  which  fatigue  of  load-bearing  fabric  members  may 
occur  is  the  exposure  to  successive  shocks  during  the  deplo^y- 
ment  and  filling  process.  Discussions  with  parachute  and 
fabric  engineers  of  the  magnitude  of  such  shocks  in  relation 
to  the  type  of  materials  used  and  the  canopy  design  factors 
indicate  that  the  reduction  of  component  strength  by  fatigue 
during  these  processes  is  not  a  factor  which  need  be  considered 
in  the  reliability  study. V 


4.3.2  Use  of  Engineering  Computations  of  Loads 

If  instrumented  drop  tests  from  which  measured  loads  on 
the  components  under  study  can  be  determined  are  not  available, 
engineering  estimates  of  the  expected  load  on  the  component 
under  design  deployment  conditions  can  be  used  in  the  above 
methodology.  In  this  case  the  estimated  load  is  used  as  y, 
the  standard  deviation  of  the  materials  sample  (sx)  is  used 
as  s,  the  number  of  materials  samples  tested  (Nx)  is  used  as 
N,  and  Nx-1  as  f  to  calculate  X  from  equations  6  and  13.  K 
is  found  as  above,  and  the  f  and  N  values  used  to  find 
from  equation  14. 


*/  Personal  Communication,  WADD  Parachute  Branch  and  Materials 
”  Laboratory. 
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It  should  be  noted  that  the  confidence  coefficient  asso¬ 
ciated  with  the  reliability  calculated  in  this  manner  refers 
to  the  results  of  the  fabric  sample  and  computation  process 
only,  and  does  not  reflect  the  adequacy  of  the  engineering 
estimate  of  the  loads.  The  confidence  which  may  be  placed  in 
the  accuracy  of  the  load  estimate  can  best  be  determined  by 
the  engineering  group  making  the  estimate.  It  is  not  possible 
to  reflect  this  degree  of  confidence  in  the  statistical  con¬ 
fidence  coefficient.  The  latter  can  only  operate  on  the  assump¬ 
tion  that  the  engineering  estimate  is  "good",  and  expresses  the 
degree  of  confidence  which  may  be  placed  in  the  reliability 
figure  which  results  from  the  acceptance  of  the  engineering 
calculation. 

Methods  for  the  engineering  computations  of  expected 
loads  are  best  chosen  by  the  parachute  design  engineer;  the 
application  of  engineering  principles  to  parachute  design 
analysis  is  beyond  the  scope  of  this  study.  Several  books 
on  the  subject  are  available 


4 . 4  Computation  of  Overall  Reliability 


The  overall  reliability,  R,  is  the  product  of  all  the 
component  reliabilities  and  the  operational  reliability. 
However,  to  arrive  at  an  overall  reliability  value  with  an 
associated  confidence  coefficient,  it  is  necessary  to  con¬ 
sider  the  confidence  coefficients  of  the  component  and  opera¬ 
tional  reliabilities  as  well. 

The  exact  computation  of  the  overall  confidence  coeffi¬ 
cient  is  a  rather  complex  matter,  and  one  which,  in  general, 
is  almost  impossible  without  major  computational  effort.  How¬ 
ever,  the  overall  confidence  coefficient  may  be  approximated 
by  the  product  of  the  confidence  coefficients  of  the  individual 
reliability  terms  with  sufficient  accuracy  for  the  purposes  of 
parachute  reliability  evaluation. 

To  demonstrate  the  degree  of  approximation  involved  in 
this  process,  a  system  with  only  two  components,  and  C2> 
in  series  may  be  considered.  Let  the  respective  reliability 
estimates  be  Rpi,gl  and  Rpg  g2-  This  means  that 

prob  (true  Rj  >  Rpi,g3^)  >  gi.  and  prob  (true  R2  >  ^P2,S2^>  ^2- 

Now  the  true  overall  reliability,  R™,  is  equal  to  true  mul¬ 
tiplied  by  true  R2.  Since  the  event 

E3  :  (true  Rg  ^  ®Pl,gl  '  ^2>S2^ 
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contains  but  is  not  necessarily  contained  in  the  product  of 
the  two  events 

=  (true  ®Pl,gl)  ^"*1  =  (true  R2  >  Rp2,g2)  » 


it  follows  that 

P(E3)  >  p(Ei)  p(E2)>  gig2- 


Since  E3  can  occur  when  not  both  Ei  and  E2  occur,  this  means 
that  gig'2  underestimate  of  pTEs) 

An  example  may  clarify  this.  Suppose 

prob  (  true  Rn  >  .  93)  >  .  95 

(19) 

prob  (true  R2  97)  >  .95. 


Then  prob  (true  Rg >  (.93)  (.97))  is  surely  >  (.95)^.  However, 

if  (.95)2  j_s  used  as  the  combined  confidence  coefficient,  in 
effect  many  favorable  possibilities  are  overlooked,  such  as: 

true  R~2  =  .92,  true  R2  =  .99. 

However,  to  take  all  such  possibilities  into  account  would 
involve  an  enormous  amount  of  calculation  by  any  techniques 
now  known. 


In  order  to  compute  the  overall  reliability  to  a  pre¬ 
selected  confidence  coefficient,  it  is  necessary  to  compute 
each  component  reliability,  and  the  operational  reliability, 
to  a  confidence  coefficient  which  will  give  the  desired  over¬ 
all  confidence  coefficient  when  the  product  is  taken. 

As  was  shown  in  a  previous  section,  a  confidence  coeffi¬ 
cient  of  90%  (or  .90)  is  probably  the  most  efficient  level  for 
this  type  of  computation,  considering  the  amount  and  types  of 
data  likely  to  be  available.  It  is  not  necessary  that  the 
confidence  coefficients  for  the  individual  component  reliabil¬ 
ity  terms  be  equal,  but  only  that  their  product  be  the  desired 
coefficient  for  the  final  result.  However,  if  equal  confidence 
coefficients  are  used  for  all  component  terms,  the  calculations 
will  be  facilitated. 

In  general,  if  there  are  N  terms  in  the  model  (one  opera¬ 
tional  term  and  N-1  component  terms),  each  of  the  individual 
reliability  terms  should  be  computed  at  a  confidence  coeffi¬ 
cient  approximating  the  Nth  root  of  the  desired  final  confidence 
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coefficient.  The  following  table  provides  approximate  values 
of  the  confidence  coefficient  required  for  the  component  terms 
to  achieve  a  confidence  coefficient  of  .90  in  the  final  result: 


No.  of  Component  Terms 

2 

3 

4 

5,6  7,8,9 

10,11,12 

Confidence  Coefficient 

.95 

.965 

.  975 

. 98  .987 

.  99 

To  avoid  extreme  complexity  in  the  evaluation  of  the  reliabil¬ 
ity  model,  it  is  recommended  that  the  number  of  component 
reliability  terms  be  held  to  the  minimum  which  will  give  ade¬ 
quate  results  (probably  not  more  than  12  terms,  and  generally 
less)  . 


4.4.1  Parallel  Components 

In  the  previous  discussion,  all  component  reliabilities 
considered  have  been  for  components  which  are  in  series  from 
a  probability  viewpoint.  That  is,  the  failure  of  any  one  com¬ 
ponent  will  result  in  the  failure  of  the  complete  system. 
Parachute  systems  may  also  contain  components  in  parallel.  In 
this  case  more  than  one  component  with  the  same  function  is 
present,  and  the  successful  operation  of  any  one  component  will 
result  in  successful  operation  of  the  entire  system  (provided, 
of  course,  no  other  failures  occur). 

An  example  of  this  is  afforded  by  parachutes  with  two 
(or  more)  reefing  line  cutters,  where  operation  of  any  one 
cutter  is  sufficient  for  successful  disreefing.  On  the  basis 
of  empirical  studies,  suppose  that  the  reliability  of  a  single 
cutter  is  determined  to  be  g  with  confidence  coefficient  g. 
Then  assuming  independence  ox  the  cutters,  the  reliability  of 
two  cutters  will  be 


1  -  (1  -  Rc,g)^  (20) 

at  a  confidence  coefficient  of  g.  Thus,  if  Rg  .95=  -92,  the 
two  cutters  will  have  a  reliability  1  -  (1-  -  .^2)2  =  1  -  .0064  = 
.9936  with  confidence  coefficient  .95. 

In  general,  for  any  number,  N,  of  parallel  components, - 
the  reliability  of  the  parallel  system  Rb  will  be 

R]3=1  -  (l-Rbig^)  (1-Rb2g2^  ■  •  •  (^~^bjjg||)  (21) 


If  gl  =  g2  =  •  •  •  =  SN’  the,n  the  overall  confidence  coefficient 
will  be  g^.  If  the  confidence  coefficients  of  the  individual 
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reliability  terms  are  not  equal,  the  overall  confidence  coeffi¬ 
cient  will  be  that  of  the  lowest  term. 


4.4.2  Canopy  Clusters 

Clusters  of  parachute  canopies  used  to  decelerate  a  single 
load  are  composed  of  components  in  parallel  from  a  physical 
viewpoint.  From  a  probabilistic  viewpoint,  however,  their 
treatment  depends  on  the  design  of  the  parachute  system.  If 
the  system  can  operate  successfully  only  with  all  canopies  in 
the  cluster  successfully  deployed,  then  each  canopy  is  repre¬ 
sented  by  a  series  term  in  the  model,  and  the  cluster  is 
treated  as  a  number  of  separate  independent  components.  How¬ 
ever,  if  the  load  can  be  decelerated  successfully  if  one  (or 
more)  of  the  parachutes  in  the  cluster  fail,  the  situation  is 
a  series-parallel  one  from  a  probabilistic  viewpoint.  In 
general,  the  probability  of  failure  of  r  identical  canopies, 

Pj.,  out  of  a  total  of  N  in  the  cluster,  when  the  probability 
of  failure  of  a  single  canopy  is  p,  is: 


Pr 


_ ^ _  P^  (1-P)^“^ 

r (N-r)  : 


(22) 


If  m  is  chosen  as  the  maximum  number  of  canopies  which  can 
fail  without  affecting  the  success  of  the  mission,  then  the 
probability  of  failure  of  the  entire  cluster,  p^j,  will  be 


N 


r=m+l 


Pr 


(23) 


For  the  usual  case  of  three  identical  heavy-duty  para¬ 
chute  canopies  in  a  cluster,  if  the  cluster  can  operate  suc¬ 
cessfully  with  only  two  of  the  canopies  deployed,  then  the 
probability  desired  is  p^j  with  m=l,  which  reduces  to 

p^j  =  3  p2  (l-p)  +  p3  (24) 

The  above  discussions  are  based  on  the  assumption  that 
there  is  no  interaction  between  the  individual  canopies  in 
the  cluster,  that  is,  that  the  probability  of  failure  of  any 
one  canopy  in  the  cluster  is  no  different  from  the  probability 
of  failure  of  the  same  canopy  when  used  singly  under  the  same 
deployment  conditions.  This  assumption  is  difficult  to  prove. 
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However,  analyses  of  the  records  of  799  standard  cargo  para¬ 
chute  drops  using  clusters  and  599  single  drops  of  the  same 
types  of  parachutes  reveals  no  significant  difference  in  the 
canopy  failure  rates  in  the  two  cases,  when  failures  due  to 
rigging  errors  are  eliminated.  Since  rigging  errors  are 
included  in  the  packing  error  term  in  the  reliability  analysis 
of  the  heavy-duty  parachute  system,  it  is  believed  that  the 
assumption  of  no  interaction  between  cluster  canopies  for  this 
type  of  parachute  system  is  valid. 


4 . 5  Application  of  Calculated  Reliability  Values 


Obviously,  the  end  result  of  the  computation  of  the  reli¬ 
ability  of  a  parachute  system  by  the  methods  described  in  this 
report  can  be  used  to  evaluate  the  long-run  performance , which 
can  be  expected  of  large  numbers  of  such  systems.  However,  the 
process  of  reliability  evaluation  presented  herein  has  broader, 
and  possibly  more  valuable,  applications. 

In  the  process  of  evaluation  of  the  reliability  model, 
the  components  of  the  parachute  system  most  likely  to  fail 
are  evaluated  individually,  as  is  the  effect  of  the  expected 
human  error  rate  in  packing.  These  sub-results  are  really 
the  key  to  the  study  of  potential  causes  of  failure  in  a 
parachute  system,  as  well  as  a  guide  to  the  efficient  expendi¬ 
ture  of  effort  in  the  improvement  of  parachute  system  relia¬ 
bility. 

To  produce  the  most  efficient  parachute. system  for  a 
given  over-all  cost,  effort  should  be  concentrated  on  achiev¬ 
ing  approximately  the  same  degree  of  reliability  for  all  com¬ 
ponents  and  for  the  packing  process.  Effort  expended  in  this 
manner  has  the  greatest  payoff  in  increasing  overall  system 
reliability. 

As  was  shown  previously,  the  level  of  system  reliability 
is  influenced  primarily  by  those  components  with  the  highest 
expected  failure  rates.  Since  the  process  of  reliability 
analysis  detailed  herein  detects  these  components  explicitly, 
it  can  be  of  major  value  in  locating  those  portions  of  a  para¬ 
chute  system  upon  which  the  expenditure  of  further  development 
effort  will  have  the  greatest  effect  on  system  reliability. 
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SECTION  5 


EXAMPLE  OF  APPLICATION  OF  RELIABILITY  ANALYSIS 


To  demonstrate  the  application  of  the  methodology  des¬ 
cribed  in  the  previous  section  to  the  evaluation  of  parachute 
system  reliability,  a  reliability  analysis  of  a  hypothetical 
heavy-duty  parachute  system  is  presented  in  detail  below. 
While  the  actual  parachute  specifications  used  are  not  those 
of  any  specific  system,  they  are  representative  of  fairly 
complex  operational  heavy-duty  parachute  systems  actually  in 
use . 


5 . 1  Parachute  System  Description 


The  hypothetical  parachute  system  consists  of  two  canopies, 
and  operates  as  a  two-stage  retardation  system  with  an  explosive 
disconnect  mechanism  to  separate  the  first  canopy  from  the  load 
after  it  has  performed  its  function,  allowing  the  second  canopy 
to  deploy.  The  system  is  primarily  intended  for  relatively 
low-altitude,  moderate-speed  deployment  ---  about  500  knots 
below  10,000  feet.  The  initial  weight  of  the  drop  unit,  in¬ 
cluding  the  major  canopies,  pilot  parachutes,  deployment  bags, 
load,  etc.  is  7000  pounds.  The  deployment  of  the  system  from 
a  compartment  in  the  end  of  the  load  is  initiated  by  a  static 
line,  which  removes  the  compartment  cover  to  which  the  pilot 
chute  deployment  bag  is  attached. 


5.1.1  First  Stage  Canopy  "" 

The  first  stage  consists  of  a  ribbon  canopy  with  nominal 
diameter  of  approximately  20  feet.  It  is  packed  in  a  deploy¬ 
ment  bag  with  a  small  pilot  chute  attached  to  remove  it  from 
the  compartment  in  the  load  and  allow  lines-first  deployment. 
Weight  of  the  canopy,  deployment  bag,  pilot  chute,  compartment 
cover  and  static  line  is  140  pounds.  The  canopy  is  reefed  by 
a  skirt  reefing  line  six  feet  in  diameter;  disreefing  is 
effected  by  two  M2A1  Reefing  Line  cutters  with  four  second 
delays . 

The  canopy  has  24  suspension  lines  made  of  nylon  webbing. 
Type  XVIII,  MIL-W-4088C.  There  is  a  sewn  loop  at  the  lower 
end  of  each  line  which  is  attached  to  a  corresponding  lug  on 
the  periphery  of  the  parachute  compartment  end  of  the  load. 
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The  inechanisra  which  disconnects  the  canopy  from  the  load 
consists  of  a  length  of  primacord  threaded  through  each  of  the 
suspension  line  lower  loops  in  a  channel  in  the  circle  of  lugs. 
The  primacord  also  passes  through  two  10  second  delay  train 
initiating  devices  consisting  essentially  of  M2A1  reefing  line 
cutters  with  their  firing  wires  reversed  and  the  cutter  knives 
replaced  with  booster  explosive  charges.  The  delay  trains  are 
initiated  at  line  stretch  by  lanyards  attached  to  the  canopy 
suspension  lines.  When  the  delay  train  ignites  the  booster 
charge,  firing  the  primacord  and  separating  the  first  canopy 
from  the  load,  loop  attachments  on  the  suspension  lines  with¬ 
draw  the  deployment  bag  containing  the  second  stage  canopy 
and  initiate  its  deployment. 


5.1.2  Second  Stage  Canopy 

The  second  stage  of  the  system  consists  of  a  solid  flat 
circular  canopy  70  feet  in  diameter.  It  is  packed  in  a  deploy¬ 
ment  bag  with  a  small  quick-opening  stabilization  chute  attached 
to  its  apex.  It  is  deployed  lines-first,  followed  by  the  canopy, 
and  then  by  the  stabilization  chute.  The  latter  keeps  the 
canopy  strung  out  in  a  straight  line  during  filling.  The  canopy 
is  reefed  by  a  10  foot  diameter  skirt  reefing  line;  disreefing 
is  effected  by  two  M2A1  reefing  line  cutters  with  two  second 
delays.  Weight  of  the  canopy,  deployment  bag,  and  stabiliza¬ 
tion  chute  is  130  pounds. 

The  72  suspension  lines  of  the  canopy  are  made  of  1/2" 
tubular  nylon  webbing,  MIL-W-005625C .  These  terminate  in 
sewn. loops  at  their  lower  ends,  and  are  attached  to  connector 
links  in  groups  of  six.  Each  of  the  connector  links  is  attached 
to  the  upper  end  of  a  riser  (twelve  in  all)  made  of  Type  XVIII 
nylon  webbing,  MIL-W-4088C.  The  lower  end  of  the  risers  are 
attached  to  a  second  set  of  attachment  lugs  on  the  periphery 
of  the  end  of  a  load,  well  separated  from  the  lugs  provided 
for  attachment  of  the  first  canopy  to  avoid  damage  when  the 
disconnect  primacord  is  fired. 


5 . 2  Preliminary  System  Analysis 


It  is  assumed  that  the  above  described  parachute  system 
has  been  designed,  several  models  have  been  built  and  drop 
tested,  that  design  deficiencies  have  been  rectified,  and  that 
at  least  one  more  series  of  development  drop  test  have  been 
run  to  prove  the  design.  Final  pre-production  models  of  the 
system  have  been  produced,  and  eleven  instrumented  drop  tests 
conducted. 


WADD  TR  60-200 


41 


study  of  these  test  results  indicates  that  the  critical 
components  of  the  system  from  a  reliability  viewpoint  (i.e., 
those  which  are  most  likely  to  fail)  are  the  suspension  lines, 
reefing  line  cutters,  and  delay  device  in  the  disconnect 
mechanism  of  the  first  stage  canopy,  and  the  suspension  lines, 
reefing  line  cutter,  and  risers  of  the  second  stage  canopy. 
Accordingly,  these  are  the  components  to  be  subjected  to 
reliability  analysis. 


5 . 3  Drop  Test  Data 


The  final  series  of  eleven  drop  tests  are  assumed  to  be 
instrumented  with  3-axis  accelerometers,  located  on  the  load, 
which  record  the  g-loads  developed  by  the  snatch  force  at  line 
stretch,  the  opening  shock  to  reefed  condition,  and  the  open¬ 
ing  shock  at  disreefing  for  each  of  the  two  canopies.  Table 
III  presents  the  hypothetical  g^^loads  computed  from  the  reso¬ 
lution  of  the  three  instrument  readings  for  each  shock  recorded 
(these  are  vector  sums  —  the  square  root  of  the  sum  of  the 
squares  of  the  longitudinal,  lateral,  and  vertical  accelerometer 
readings) . 

Examination  of  the  distribution  of  the  g-values  indicates 
that  they  are  approximately  normal.  The  release  speeds  and 
altitudes  (450-525  knots,  6000-10,000  feet)  are  close  to  the 
parachute  system  design  limits  ofSDOkts  and  approximately 
10,000  feet. 


5 . 4  Suspension  Line  and  Riser  Reliability  Analysis 


To  determine  the  loads  to  which  each  suspension  line  and  .. 
each  riser  will  be  subjected,  it  is  first  necessary  to  calculate 
the  mean  load,  and  its  standard  deviation,  for  each  of  the  three 
shocks  on  each  canopy.  Since  all  the  drop  units  have  been 
assumed  to  have  the  same  weight,  the  computations  are  simpli¬ 
fied  if  the  means  and  standard  deviations  of  the  loads  are 
first  calculated  in  terms  of  g's  and  then  converted  to  pounds 
by  multiplying  by  the  drop  unit  weight  at  the  time  of  the  shock. 
(If  drop  unit  weights  were  not  equal  it  would  be  necessary  to 
convert  to  pounds  by  multiplying  weight  by  acceleration  prior 
to  computation.) 


The  mean  is  the  average  —  the  sum  of  the  forces  divided 
by  the  number  of  observations.  The  standard  deviation  is  most 
readily  computed  from  a  formula  developed  from  equation  (5)  of 
Section  4: 


s 


_/nSx2  -  (£x)2 


N(N-l) 


(25) 
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Table  III.  Hypothetical  Drop  Test  Data 


Canopy  # 

1 

Canopy  #  2 

Drop 

Snatch 

Opening  Shock ,  g 

Snatch 

Opening 

Shock ,  g 

No. 

Force , 

g  Reefed 

Disreef ed 

Force , 

g  Reefed 

Disreefed 

1 

4.1 

7.3 

7.6 

1.9 

2.4 

5.9 

2 

6.8 

5.6 

7.2 

4.1 

4.3 

1.7 

3 

- 

9.9 

7.9 

4.1 

- 

3.3 

4 

3.9 

4.2 

6.8 

5.2 

5.5 

2.8 

5 

4.7 

7.1 

4.6 

2.6 

3.7 

2.0 

6 

5.3 

7.2 

7.1 

2.9 

1.3 

3.5 

7 

7.8 

8.7 

6.9 

3.2 

3.3 

2.1 

8 

7.3 

9.4 

8.1 

3.4 

4.1 

4.6 

9 

5.7 

6.7 

5.8 

1.7 

1.7 

1.6 

10 

4.9 

6.2 

- 

2.8 

3.0 

3.1 

11 

2.9 

3.3 

9.2 

3.7 

2.1 

2.7 

All  Data:  450-525  kts  release  speed;  6000-10,000  ft.  release 
altitude 
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The  drop  unit  weight  at  release  was  given  as  7000  pounds. 
The  first  canopy,  with  its  deployment  bag,  cover,  etc.  weighs 
140  pounds;  thus  the  load  weight  during  first  canopy  deploy¬ 
ment  is  6860  pounds.  The  second  canopy  with  its  bag,  etc. 
weighs  130  pounds,  reducing  the  load  weight  to  6730  pounds  at 
its  deployment . 

To  compute  the  load  per  line  and  the  standard  deviation 
of  the  load  per  line  for  each  canopy,  the  appropriate  total 
mean  and  standard  deviation  are  divided  by  the  number  of  lines 
24  for  the  first  canopy,  and  72  for  the  second.  The  load  and 
its  standard  deviation  per  riser  for  the  second  canopy  are 
found  similarly,  by  dividing  the  total  values  by  the  number  of 
risers  (12) .  The  results  of  these  calculations  are  summarized 
in  Table  IV. 

Materials  test  data  are  required  on  two  types  of  webbings 
Type  XVIII  of  MIL-W-4088C  (canopy  #1  suspension  lines  and 
canopy  #2  risers)  and  1/2"  tubular  webbing  of  MIL-W-005625C 
(canopy  #2  suspension  lines) .  Table  IX  of  Appendix  B  indi¬ 
cates  that  the  mean  tensile  strength  of  the  Type  XVIII  webbing 
is  7486  pounds,  and  the  strength  of  the  1/2"  tubular  webbing 
is  1387  pounds.  Since  both  of  these  materials  are  sewed  in 
the  process  of  manufacturing  the  canopies  and  risers,  the  ten¬ 
sile  strength  values  are  reduced  by  20%  to  allow  for  loss  of 
strength  in  seams  (see  paragraph  4.3. 1.1  in  Section  4).  Thus, 
the  materials  strength  data  required  for  the  computations  are: 


Mean  (x) 

Type  XVIII 
5989  lbs. 

1/2"  Tubular 
lllO  lbs. 

Standard  Deviation  (sx) 

272  lbs. 

218 

lbs . 

Number  of  Tests  (N^.) 

61 

30 

Degrees  of  Freedom  (fx) 

60 

29 

The  first  step  in  the  reliability  analysis  is  the  selec¬ 
tion  of  the  set  of  data  to  be  used  as  s^^^  Nl  and  fi,  on  the 
basis  of  the  smaller  variance  (standard  deviation  squared) 
for  each  case  to  be  considered.  In  Table  V  the  data  necessary 
for  the  evaluation  of  equations  6  through  11  of  paragraph 
4 . 3 . 1 . AiLJLUe  computation  of  N,  f,  x  -  y,  and  s,  are  listed 
for  each  of  the  nine  cases,  along  with  the  results  of  each 
computation . 
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Table  IV.  Computations  of  Mean  and  Standard  Deviation, 

Loads"  per  Line  and  per  Riser 


Total  Loads 


Canopy  1 


_  Canopy  #  2 _ 

Snatch  Opening  Shock 
Force  Reefed  Disreef ed 


Mean  (g's) 

5.34 

6.87 

7.12 

3.24 

3.14 

3.03 

Standard 

Deviation 

(g's) 

1.42 

2.03 

1.26 

1.02 

1.30 

1.30 

Mean  (lbs) 

36632 

47128 

48843 

21805 

21132 

20392 

Standard 

Deviation 

(lbs) 

9741 

13925 

8643 

6865 

8749 

8749 

Load/Line 

Mean  (lbs)(y) 

1526 

1964 

2035 

303 

294 

283 

Standard 

Deviation 

(lbs)  (Sy) 

406 

580 

360 

95.3 

122 

121. 5 

Load/Riser 

Mean  (lbs) 

(y) 

- 

- 

- 

1817 

1761 

1699 

standard 
Deviation 
(lbs)  (Sy) 

572 

729 

729 

Number  of 
Tests  (Ny) 

10 

11 

10 

11 

10 

11 

Degrees  of 
Freedom  (fy) 

9 

10 

9 

10 

9 

10 
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Table  V.  Data  Required,  and  Calculations  of  N,  f,  s^,  and  x-y 

Canopy  #1  Suspension  Lines,  Snatch  Force 

X  =  5989  y  =  1526  x-y  =  4463 


83^2  =  73984 

Q  2 
®2 

=  164863 

s  =  488.7 

Ni  =  61 

N2 

=  10 

N  =  13.50 

fl  =  60 

^2 

=  9 

f  =  18.34 

Canopy  #1  Suspension 

Lines , 

Opening  Shock, 

Reefed 

X  =  5989 

y 

=  1964 

x-y  =  4025 

=  73984 

s  2 

=  336400 

s  =  640.61 

=  61 

^2 

=  11 

N  =  12.91 

±1  =  60 

^2 

=  10 

f  =  14.76 

Canopy  #1  Suspension 

Lines , 

Opening  Shock, 

Disreef ed 

X  =  5989 

y 

=  2035 

x-y  =  3954 

83^2  =  73984 

=  129600 

s  =  451.20 

=  61 

N2 

=  10 

N  =  14.36 

£3^  =  60 

^2 

=  9 

f  =  21.17 

Canopy  #2  Suspension 

Lines , 

Snatch  Force 

y  =  303 

X 

=  1110 

x-y  =  807 

s^Z  =  9082 

s  2 
®2 

=  47524 

s  =  237.92 

=  11 

N2 

=  30 

N  =  23.49 

fl  =  10 

^2 

=  29 

f  =  37.20 

(Continued) 
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Table  V.  (Continued)  Data  Required,  and  Calculation  of 

N,  f,  and  x 


Canopy  #2  Suspension  Lines,  Opening  Shock,  Reefed 


y  =  294 

X  =  1110 

x-y  =  816 

Si2  =  14884 

Sg^  =  47524 

s  =  249.81 

Ni  =  10 

N2  =  30 

N  =  20.31 

fl  =  9 

f2  =  29 

f  =  38.00 

Canopy  #2  Suspension  Lines,  Opening  Shock,  Disreefed 

y  =  283 

X  =  1110 

x-y  =  827 

=  14762 

S2^  =  47524 

s  =  249.57 

=  11 

N2  =  30 

N  =  21.28 

fl  =  10 

f2  =  29 

f  =  38.92 

Canopy  #2  Risers, 

Snatch  Force 

X  =  5989 

y  =  1817 

x-y  =  4172 

Si2  =  73984 

82^  =  327184 

s  =  633.37 

Ni  =  61 

N2  =  11 

N  =  12.96 

f  =  60 

f2  =  10 

f  =  14.91 

Canopy  #2  Risers, 

Opening  Shock,  Reefed 

X  =  5989 

y  =  1761 

x-y  =  4228 

Sj^2  =  73984 

82^  =  531441 

s  =  778.09 

=  61 

N2  =  10 

N  =  11.14 

fl  =  60 

f2  =  9 

f  =  11.65 

(Continued) 
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Table  V.  (Continued)  Data  Required,  and  Calculation  of 

N,  f,  and  x 

Canopy  #2  Risers,  Opening  Shock,  Disreefed 


X  =  5989 

y  =  1699 

x-y  .=  4320 

S^2  =  73984 

=  531441 

s  =  778.09 

=  61 

N2  =  11 

N  =  12.4993 

o 

to 

II 

f 

f9  =  10 

f  =  12.9362 
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The  next  step  in  the  computation  is  the  evaluation  of  X 
for  each  case  by  use  of  equation  (13),  using  the  values  for  N, 
f,  s  and  x-y  calculated  above.  Since  there  will  be  eight  reli¬ 
ability  terms  in  the  final  model,  the  desired  confidence  coeffi¬ 
cient  for  each  term  is  .987  (see  below  and  paragraph  4.4).  The 
Non-Central  t-Distribution  nomograms  in  Figures  4,  5,  and  6  are 
available  for  .90,  .95,  and  .99  confidence  only.  Thus  it  will 
be  necessary  to  calculate  the  reliability  for  all  three  confi¬ 
dence  levels  and  interpolate  graphically  to  obtain  the  relia¬ 
bility  at  .987  confidence.  (In  those  cases  in  which  the  reli¬ 
ability  at  either  99%  or  95%  confidence  coefficient  is  found 
to  be  .9999+,  it  is  not  necessary  to  compute  reliability  at  a 
lower  confidence  coefficient,  since  it  will  obviously  also  be 
.9999+.) 

Entering  each  plot  of  the  Non-Central  t-Distribution  with 
X  and  f ,  three  values  of  K  (one  for  each  confidence-  coefficient) 
for  use  in  equation  (14)  can  be  found.  From  K,  N,  and  ±,  -^/cr 
is  computed  for  each  of  the  three  confidence  values.  The  table 
of  the  areas  under  the  Normal  Curve,  Table  II,  gives  the  corres¬ 
ponding  value  of  reliability  (Rg)  for  each  ^/a-  value.  Inter¬ 
polation  on  the  plot  of  R  vs .  g  (figure  7)  gives  the  reliability 
value  to  the  desired  confidence  coefficient. 

The  results  of  the  above  computations  for  each  of  the  nine 
canopy  cases  are  summarized  in  Table  VI.  Examination  of  the 
last  column  in  this  table  indicates  that  Canopy  #1  suspension 
lines  have  their  lowest  reliability  (.9998)  during  opening  shock 
to  the  reefed  condition.  The  lines  of  Canopy  #2  have  their 
lowest  reliability  (.9910)  during  both  opening  shocks,  while 
the  risers  on  this  canopy  are  at  their  lowest  reliability  (.9986) 
during  the  opening  shock  to  the  reefed  condition.  The  three 
reliability  figures  above,  consequently,  are  used  in  the  com¬ 
putation  of  the  final  reliability  value  in  paragraph  5.8. 


5 . 5  Reefing  Line  Cutter  Reliability  Analysis 


Both  canopies  use  the  M2A1  reefing  line  cutter  in  pairs 
to  effect  disreefing  after  the  first  stage  of  filling.  Since 
no  data  on  the  performance  of  this  cutter  under  high  accelera¬ 
tion,  and  no  data  on  the  acceleration  experienced  by  the  cutter 
in  this  application  are  available,  the  reliability  figures  (at 
99%  confidence)  presented  in  Table  II  of  Appendix  B  are  used 
in  the  computations.  The  M2A1  cutter  was  found  to  have  R^ggy  = 
.985  for  both  two  and  four  second  delays  in  non-tropical  environ¬ 
ments.  This  value  is  substituted  in  equation  (15)  to  compute 
the  reliability  of  the  pair  of  cutters;  the  result  is  R  ggy  = 
.9998. 
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Confidence  Coefficient 


- i - 1 - 1 - 1 - 1 - 1 — 

.9900  .9920  .9940  .9960  .9980  1.0 


Figure  7.  Interpolation  for  Reliability  at  Intermediate  Con¬ 
fidence  Coefficient 
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Table  VI.  Compvatation  of  Canopy  Reliability 

Confidence  =  ,90  Confidence  =  .95  Confidence  =  .99 
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5 . 0  Disconnect  Mechanism  Reliability  Analysis 


The  disconnect  mechanism  is  essentially  a  pair  of  M2A1 
reefing  line  cutters  in  parallel  with  the  cutter  knives  removed 
(see  paragraph  5.1.1).  The  reliability  will,  consequently,  be 
the  same  as  that  of  a  pair  of  reefing  line  cutters  in  parallel 
R.987  =  .9998. 


5 . 7  Packing  Reliability 


Studies  of  cargo  and  extraction  parachute  performance  in 
routine  use  (see  Appendix  A)  indicate  that  an  overall  rate  of 
about  2.7  failures  per  thousand  canopies  due  to  errors  in 
packing  have  been  experienced.  Since  the  hypothetical  parachute 
system  considered  herein  has  two  canopies,  there  will  be  two 
packing  reliability  terms  in  the  model.  At  a  98.7%  confidence 
coefficient,  the  reliability  value  is  .9953  for  each  canopy. 


5.8  Overall  Reliability 


The  reliability  model  for  the  hypothetical  parachute  sys¬ 
tem  has  eight  terms,  six  of  which  are  component  terms:  two 
canopy  terms,  one  riser  term,  two  reefing  line  cutter  terms, 
and  one  disconnect  mechanism  terra.  The  reason  for  the  two 
operational  terms  is  discussed  above. 


R  -■  Rp^*Rp2‘Rc2^  •••J^C0  (26) 

Numerical  values  for  each  of  these  terms  have  been  derived  in 
the  preceding  paragraphs,  and  are  summarized  in  Table  VII,  along 
with  the  computed  component  and  operational  reliability  and  the 
overall  reliability. 


5 . 9  Interpretation  of  Results 

The  interpretation  of  the  overall  reliability  figure  of 
.979  is  evident;  in  the  long  run,  about  21  failures  per  thou¬ 
sand  uses  can  be  expected  with  this  hypothetical  parachute  sys¬ 
tem  in  at  least  90%  of  all  sets  of  trials. 

However,  the  reliability  values  computed  for  the  indivi¬ 
dual  components  are  also  of  value  in  analyzing  the  system.  For 
example,  the  suspension  lines  of  Canopy  #2  are  obviously  under¬ 
strength  for  the  loads  to  which  they  are  subjected,  despite  the 
fact  that  the  maximum  of  the  three  mean  loads  per  line  is  only 
303  pounds  per  line,  while  the  material  has  a  mean  test  tensile 


WADD  TR  60-200 


52 


Table  VII.  Component,  Operational,  and  Overall  Reliability 

Component  Reliability  (R^) 

Canopy  #1  Lines  =;  .9998 

Canopy  #2  Lines  =  . 9910 

Canopy  #2  Risers  =  .9986 

Canopy  #1  Reefing 

Line  Cutters  =  .9998 

Canopy  #2  Reefing 

Line  Cutters  =  .9998 

Disconnect  Mechanism  =  .9998 

6 

Component  Reliability  =  "J^R 

i=l 

=  .9998  X  .9910  x  .9986  x  .9998  x  .9998  x  .9998 
Component  Reliability  =  .9888 

Operational  Reliability  (Rp) 

Canopy  #1  Packing  =  . 9953 
Canopy  #2  Packing  =  . 9953 

Operational  Reliability  =  Rp^  .  Rp^ 

=  .9953  X  .9953 

Operational  Reliability  =  .9906 

Overall  Reliability  (90%  confidence) 

R  =  Rp  R^ 

=  .9906  X  .9888 
R  =  .979 
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of  1110  pounds  after  an  allowance  of  20%  for  seams.  In  this 
case  the  load  is  about  27%  of  the  mean  measured  materials 
strength. 

On  the  other  hand,  Canopy  #1  appears  to  be  highly  reliable, 
with  a  maximum  mean  load  per  line  of  2035  pounds  and  a  materials 
mean  strength  (after  sewing)  of  5989  —  here  the  load  is  about 
34%  of  the  measured  mean  strength. 

The  explanation  for  this  phenomenon  lies  in  the  relative 
magnitudes  of  the  variances  (standard  deviation  squared)  of 
materials  strength,  tabled  below  for  the  two  materials  involved. 


Mean 

Variance 


Canopy  #1 

MIL-W-4088C,  Type  XVIII 
5989 
73984 


Canopy  #2 

MIL-W-005625C,l/2’’ 

1110 

47524 


Variance 

Mean 


12.4 


42.8 


As  can  be  seen  above,  the  ratio  of  variance  to  mean  in  the  case 
of  the  suspension  lines  of  Canopy  #2  is  several  times  that  for 
Canopy  #1,  indicating  a  wider  variability  in  the  manufactured 
material  strength.  Study  of  the  equations  used  in  calculating 
the  reliability  of  the  canopy  lines  indicate  that  the  final 
values  are  roughly  proportional  to  variance  (and  hence  strength 
variability).  Thus,  in  the  selection  of  materials  for  load- 
bearing  members  of  parachutes,  those  materials  with  the  lower 
variances  (or  standard  deviations),  will  give  better  results, 
mean  strengths  being  equivalent. 

A  second  type  of  information  may  be  derived  from  a  com¬ 
parison  of  the  performance  of  the  MIL-W-4088C  Type  XVIII 
webbing  in  the  suspension  lines  of  Canopy  #1  and  in  the  risers 
of  Canopy  #2.  Data  for  the  worst  of  the  three  shocks  are 
tabulated  below. 


Canopy  #1 

Canopy  #2 

Lines 

Risers 

Mean  Load/Line  or  Riser 

1  964 

1  761 

Variance/Line  or  Riser 

336  400 

531  441 

Variance 

171 

302 

Mean 

Reliability 

.9998 

.9986 
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It  can  be  seen  that  the  webbing  performs  better  in  the 
suspension  lines  than  in  the  risers,  despite  the  fact  that  the 
load  per  member  is  higher  in  the  case  of  the  lines.  Here, 
again,  the  variances  are  the  key  to  the  problem.  The  shocks 
on  the  risers  are  considerably  more  variable  than  the  shocks 
on  the  lines,  as  indicated  by  the  ratios  of  the  variances  to 
the  means. 

Since  the  parachute  system  analyzed  herein  is  a  hypothe¬ 
tical  one,  it  is  not  really  possible  to  find  a  physical  cause 
for  this  variability.  However,  studies  of  drop  test  records 
of  actual  parachute  systems  similar  to  the  hypothetical  one 
indicate  that  the  variability  of  the  shocks  is  due  primarily 
to  instability  of  the  load  during  the  deployment  and  filling 
of  the  canopy.  Thus,  to  increase  the  reliability  of  components 
affected  by  this  instability  it  is  necessary  for  the  parachute 
designer  to  have  some  voice  in  the  design  of  the  load  for  better 
aerodynamic  properties.  Of  course,  some  improvement  may  also 
be  expected  by  increasing  the  stability  of  the  canopy  during 
the  deployment  and  filling  process. 

The  reliability  analysis  can  also  provide  an  indication 
of  any  required  improvement  in  the  reliability  of  auxiliary 
mechanical  devices  used  in  the  parachute  system.  In  the 
example,  the  reefing  line  cutter  and  the  disconnect  mechanism 
reliabilities  are  a  case  in  point. 

Taken  singly,  each  of  these  devices  has  lower  reliability 
(.985)  than  that  calculated  for  the  overall  component  relia¬ 
bility  of  the  parachute  system  (.988).  Since  they  are  used 
in  parallel  pairs,  however,  the  reliability  of  the  two  is  high 
enough  (.9998)  so  that  their  effect  on  overall  system  relia¬ 
bility  is  not  serious.  An  increase  in  the  reliability  of  each 
device  from  ,985  to  .993  would  bring  the  reliability  of  the 
parallel  pair  to  .9999+  (regarded  in  this  computation  as  high 
enough  to  be  omitted  from  the  calculation) ,  resulting  in  only 
a  minor  increase  of  overall  system  reliability  (from  .979  to 
.980).  However,  should  the  reliability  of  the  auxiliary 
device  be  lower,  an  attempt  at  improvement  of  its  performance 
is  definitely  indicated  as  a  means  of  increasing  overall  sys¬ 
tem  reliability  without  major  redesign  effort. 

It  must  be  realized  that  the  parachute  system  analyzed  in 
this  section  is  a  hypothetical  one.  No  actual  parachute  system 
which  has  reached  the  point  of  final  operational  testing  is 
likely  to  have  reliability  as  low  as  that  calculated  for  the 
example,  either  in  its  individual  components  or  on  an  overall 
basis.  The  hypothetical  system  has  had  weak  points  deliberately 
designed  into  it  to  illustrate  the  computational  methods  and 
the  types  of  conclusions  which  may  be  drawn  from  their  results. 
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However,  the  causes  of  unreliability  in  the  example  are  actually 
drawn  from  parallel  cases  in  a  number  of  operational  parachute 
systems,  and  represent  typical  problems  which  may  arise  in 
heavy  duty  parachute  reliability  analysis. 
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APPENDIX  A 


PARACHUTE  PACKING  RELIABILITY  DATA 


Study  of  parachute  drop  records,  and  discussions  with  per¬ 
sonnel  of  military  units  using  large  numbers  of  cargo  parachutes, 
indicate  that  human  error  in  the  parachute  packing  process  is 
a  major  source  of  parachute  system  failure.  Thus,  in  develop¬ 
ing  a  mathematical  model  and  basic  data  for  the  evaluation  of 
the  reliability  of  heavy-duty  parachute  systems,  detailed  con¬ 
sideration  of  parachute  failure  rates  due  to  packing  errors 
was  included. 

The  data  available  in  sufficient  quantity  for  a  statistical 
approach  to  the  study  of  parachute  packing  reliability  result 
from  drops  of  three  parachute  types:  (1)  Cargo  parachute  sys¬ 
tems  in  routine  field  use,  (2)  Man-carrying  parachutes  used  by 
airborne  troops,  and  (3)  Test  data  on  experimental  and  develop¬ 
ment-phase  parachute  systems.  Since  the  reliability  model 
developed  in  this  study  is  pointed  toward  the  evaluation  of 
the  performance  of  heavy-duty  parachute  systems ,  the  ideal 
data  source  would  be  packing  error  experience  with  parachutes 
of  this  type.  Unfortunately,  statistically  adequate  data  for 
these  operations  were  not  available  for  this  study,  and  it  was 
necessary  to  use  available  information. 

Of  the  three  types  of  parachute  use  data  available  in 
quantity  (see  above) ,  two,  man-carrying  and  experimental- 
developmental  uses,  were  rejected  as  being  too  unlike  the  data 
actually  required  for  use  in  this  study.  Man-carrying  para¬ 
chutes  are  of  almost  completely  different  design  and  load 
capacity;  experimental  and  development-phase  parachute  perform¬ 
ance  is  so  uncertain  as  to  make  the  differentiation  between 
packing  failures,  design  failures,  and  other  types  of  failures 
very  uncertain.  Thus,  the  choice  falls  upon  cargo  parachute 
systems  as  being  the  closest  type  to  the  heavy-duty  systems 
available,  as  far  as  the  packing  problem  is  concerned. 

Actually,  information  gathered  during  interviews  with  per¬ 
sonnel  working  with  heavy-duty  parachutes  and  cargo  parachutes 
indicates  that  the  packing  process  for  the  former  is  probably 
done  with  somewhat  greater  care  than  the  usual  packing  process 
for  cargo  parachutes,  and  that  there  is  a  possibility  that  the 
overall  packing  failure  rates  in  the  two  cases  may  not  be  the 
same . 
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To  base  the  study  of  packing  failure  rates  on  processes 
resembling  heavy-duty  parachute  packing  as  closely  as  possible, 
the  cargo  parachutes  studied  were  those  used  by  test  agencies 
developing  and  testing  methods  of  use  of  standard  cargo  para¬ 
chute  systems,  rather  than  testing  the  parachutes  themselves 
or  using  them  in  tactical  airborne  operations.  Data  gathered 
in  field  interviews  indicate  that  personnel  packing  the  para¬ 
chutes  in  these  units  would  tend  to  have  greater  continuity  of 
task  assignment  than  their  counterparts  in  tactical  airborne 
units . 

Furthermore,  it  is  expected  that  these  people  would  tend 
to  exercise  more  care  in  the  packing  process  than  the  field 
units,  since  the  equipment  to  be  test  airdropped  is  generally 
available  to  them  in  very  limited  amount,  making  it  essential 
that  the  chances  of  failure  in  the  test  from  extraneous  causes 
be  held  to  a  minimum.  Since  these  test  organizations  use  the 
standard  cargo  parachutes  repeatedly  as  routine  tools  in 
developing  airdrop  methods,  it  can  be  expected  that  the  level 
of  proficiency  in  the  packing  process  in  these  units  will  be 
as  great  as  can  be  expected  in  any  type  of  parachute  use. 

The  actual  data  used  in  the  analysis  of  packing  failure 
rates  were  obtained  chiefly  from  the  project  files  of  the 
Airborne  Test  Division  of  the  U.S.  Army  Airborne  and  Elec¬ 
tronics  Board  at  Fort  Bragg,  North  Carolina,  and  the  Airborne 
Systems  Test  Division  of  the  U.S.  Army  Quartermaster  Field 
Evaluation  Agency  at  the  Yuma  Test  Station,  Arizona.  These 
data  were  supplemented  by  parallel  types  obtained  in  smaller 
amounts  from  the  routine  drop  test  activities  of  the  6511th 
Test  Group  (Parachute),  NAAS,  El  Centro,  California,  and  a 
few  other  agencies. 

In  all,  records  of  5563  uses  of  standard  parachute  systems 
were  found.  The  failures  recorded  were  studied  carefully, 
generally  after  consultation  with  personnel  of  the  organizations 
involved,  to  determine  the  number  of  failures  which  could  be 
attributed  to  errors  in  the  packing  process  (at  the  same  time, 
data  were  collected  on  materials  failures  in  the  G-llA  and 
G-12D  Canopies  for  other  analyses  --  see  below) . 

The  data  collected  were  analyzed  for  packing  failure  rates 
for  two  cargo  parachute  types,  the  G-llA  and  G-12D,  and  for  all 
standard  extraction  parachutes  as  a  group  (combining  15,  22, 

24  and  28  foot  ring-slot  and  fist-ribbon  types  to  obtain  a 
sufficiently  large  sample) .  All  other  cargo  parachute  types 
have  been  grouped  as  "miscellaneous". 
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Packing  failure  causes  included  six  cases  in  which  reef¬ 
ing  line  cutters  were  not  armed,  one  case  in  which  the  cut 
reefing  line  could  not  slip  through  the  reefing  rings  to  re¬ 
lease  the  canopy  skirt ,  one  case  in  which  the  canopy  was 
^packed  in  such  a  manner  that  it  emerged  from  the  bag  twisted, 
three  cases  in  which  improper  cut  knife  installation  prevented 
deployment,  one  case  of  the  use  of  too  strong  a  break  cord, 
one  case  in  which  the  canopy  was  not  attached  to  the  bridle, 
and  two  cases  of  static  lines  improperly  attached  to  the  pack. 
Thus,  14  of  the  15  packing  failures  can  be  attributed  to 
auxiliary  devices  (cutters,  attachments,  knives,  etc.),  with 
only  one  failure  due  to  the  canopy  packing  itself. 


Parachute 

Type 

No.  of 
Uses 

No.  of  Packing 
Failures 

Observed 
Failure  Rate 

G-llA 

1964 

7 

.00356 

G-12D 

1333 

3 

.00225 

Extraction 

1009 

3 

.00297 

Misc  . 

1257 

2 

.00159 

Combined 

5563 

15 

. 00270 

Examination  of  the  results  of  this  study  indicates  that 
the  observed  failure  rate  is  between  approximately  1.6  and  3.6 
per  thousand  parachute  packings.  While  this  rate  is  not  based 
on  use  data  for  heavy-duty  parachute  systems,  it  appears  to  be 
the  best  estimate  available  until  sufficient  data  on  heavy-duty 
parachute  uses  are  available  for  analysis. 

Of  course,  before  these  data  can  be  substituted  in  the 
reliability  model,  the  confidence  coefficient  must  be  selected, 
and  the  expected  failure  rate  computed  from  Equation  4  or  from 
Table  I.  The  combined  values  give  reliabilities  of  .9962, 

.9958,  and  .9952  at  confidence  coefficients  of  90,  95,  and 
99%  respectively. 
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APPENDIX  B 


PARACHUTE  COMPONENT  RELIABILITY  DATA 


As  can  be  seen  from  the  discussion  of  the  methods  of  eval¬ 
uation  of  the  reliability  model  presented  in  this  report,  a 
considerable  body  of  data  on  the  components  of  the  parachute 
system  are  required  to  evaluate  system  reliability.  Many  of 
these  data  are  unique  to  the  specific  system  under  evaluation, 
and  must  be  obtained  for  the  specific  system.  Some  types  of 
component  reliability  data,  however,  are  applicable  to  a  wide 
range  of  parachute  systems.  Where  possible,  these  have  been 
collected  as  part  of  this  study.  Such  data  on  reefing  line 
cutters,  solid  flat  circular  canopies,  and  some  parachute 
materials  are  presented  below  in  a  form  directly  applicable  to 
the  evaluation  of  the  reliability  model. 


B . 1  Solid  Circular  Canopy  Reliability 


In  the  study  of  cargo  parachute  drop  data  used  to  evaluate 
parachute  packing  reliability  (See  Appendix  A) ,  data  on  material 
failures  for  the  G-llA  (100-foot)  and  G-12D  (64-foot)  cargo 
parachute  canopies  were  assembled,  inasmuch  as  these  canopies 
are  used  as  components  of  heavy-duty  parachute  systems.  In 
the  case  of  the  G-llA  canopy  used  under  its  design  conditions, 
one  failure  attributable  to  materials  failure  (suspension  lines 
broke)  in  1964  uses  were  found.  For  the  G-12D,  no  failures 
attributable  to  materials  were  found  in  the  records  of  1333 
uses.  Computed  reliabilities  for  various  confidence  coeffi¬ 
cients  (from  Table  I,  page  32)  are  presented  below. 


Reliability 


No. 

Uses 

No. 

Failures 

90% 

95% 

96.5% 

98% 

99% 

G-llA 

1964 

1 

.9980 

.9976 

.  9974 

.9969 

.  9966 

G-12D 

1333 

0 

.  9983 

.9977 

.9975 

.9969 

.  9966 

These  data  are  usable  in  their  present  form  as  component 
reliabilities  in  computations  for  systems  in  which  the  specific 
canopies  are  used  under  their  design  conditions.  Computations 
based  on  larger  samples,  however,  will  provide  better  estimates 
of  the  reliabilities  of  these  canopies.  Thus,  should  more  use 
data  on  these  canopies  become  available,  they  should  be  combined 
with  the  above. 
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B . 2  Reefing  Line  Cutter  Reliability—^ 


Reefing  line  cutter  field  performance  data  based  on  actual 
parachute  use  are  generally  not  available  in  a  form  from  which 
reliability  can  readily  be  calculated.  Since  most  parachute 
systems  employing  reefing  lines  have  more  than  one  cutter,  and 
since  the  successful  operation  of  any  one  cut  ar  will  disreef 
the  canopy,  disreefing  failure  data  generated  by  field  use  are 
generally  based  on  simultaneous  failures  of  more  than  one 
cutter.  Laboratory  test  data  on  single  items  are  available 
in  sufficient  quantity,  however,  to  allow  computation  of  reli¬ 
ability  estimates  on  some  reefing  line  cutter  models. 

In  the  analysis  of  these  test  data  to  determine  expected 
failure  rates  for  reefing  line  cutters,  the  conditions  of  use 
of  the  cutter  are  very  important  factors  in  determining  appli¬ 
cability  of  the  reliability  figures  derived.  The  most  commonly 
used  reefing  line  cutter,  the  M2A1,  was  designed  for  use  pri¬ 
marily  in  low-altitude,  low-deployment-speed  cargo  parachute 
systems.  The  original  specifications  called  for  an  operating 
altitude  of  2000  to  5000  feet,  (although  the  cutter  was  to  be 
operable  to  150,000  feet  with  broader  tolerances)  a  tempera¬ 
ture  range  of  70°  +  10°F,  timing  tolerance  of  +  10%  at  70°F 
(later  broadened  somewhat) ,  a  pull  angle  of  not  more  than 
+22.5°  off  the  longitudinal  axis  of  the  cutter,  and  a  pull 
load  to  fire  of  20  pounds  (later  changed  to  60  inch  pounds 
maximum  to  fire,  not  to  fire  at  10  pounds  static  pull).  The 
cutter  was  not  designed  to  be  subject  to  high  shock  loadings 
during  operation.^/ 

When  used  in  a  standard  cargo  parachute  system  (e.g.  the 
G-llA)  these  conditions,  with  the  possible  exception  of  the 
timing  tolerance  due  to  varying  operating  temperature,  are 
generally  met.  Temperature  effects  on  timing  are  said  to 
result  in  an  additional  10%  decrease  in  delay  time  at  +160°F 
and  an  additional  20%  increase  at  -65°F.^/ 

Discussions  with  parachute  using  units  and  with  Army 
Ordnance  Corps  personnel  indicate  that  the  performance  of  the 
M2A1  reefing  line  cutter  in  standard  cargo  parachutes  (gener¬ 
ally  two  are  used  to  increase  reliability)  is  satisfactory. 
Laboratory  test  results  indicate  comparatively  low  failure 
rates  for  this  model: 


V  Reefing  line  cutter  test  data  presented  below  were 
obtained  from  the  Industrial  Engineering  Division, 
Picatinny  Arsenal. 
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Test  Conditions 

Total 

Tested 

No . 
Good 

No. 

Failed. 

Reliability 

(90% 

Confidence) 

Laboratory  Ambient  (70®F) 

1100 

1100 

0 

.998 

Low  Temperature  (-65®F) 

690 

688 

2 

.992 

High  Temperature  (+1650F) 

550 

548 

2 

.990 

High  Temperature ,  100% 
Relative  Humidity 

260 

248 

12 

.931 

Parachute  Use  Test  > 

(Cargo  Parachute) 

100 

100 

0 

.977 

With  the  exception  of  the  combined  high  temperature- 
humidity  test,  the  above  results  suggest  that  the  standard 
M2A1  cutter,  under  static  conditions,  is  a  highly  reliable 
device . 

The  high  temperature-humidity  environment  does  reduce 
this  reliability  to  a  considersible  extent.  This  environment 
affects  the  reefing  line  cutter  by  causing  distortion  of  the 
nylon  ball  which  holds  the  firing  pin  in  place  until  the  fir¬ 
ing  wire  is  pulled.  When  the  firing  wire  is  removed  from  the 
cutter  by  the  lanyard  at  the  end  of  line-stretch  during  para¬ 
chute  deployment,  the  nylon  ball  is  allowed  to  move  back  in  a 
channel,  releasing  the  firing  pin  so  that  the  firing  spring 
may  drive  it  against  the  detonator.  If  this  ball  is  distorted 
by  high  temperature  and  high  humidity,  it  can  not  readily  move 
back  into  the  channel.  The  distortion  does  not  always  cause 
complete  failure  of  the  cutter,  but  often  causes  considerably 
lengthened  delay  times,  since  the  ball  is  usually  squeezed 
into  the  channel  gradually  by  the  force  of  the  firing  spring.—/ 

Since  the  high-temperature-humidity  environment  represents 
the  effects  of  the  probable  extremes  of  a  hot,  moist  tropical 
climate  on  the  cutter_/ ;  its  effect  need  only  be  considered 
when  extended  tropic-based  parachute  missions  are  involved. 

Since  the  reefing  line  cutter  is  installed  on  the  skirt 
of  the  canopy,  it  will  be  subject  to  considerable  acceleration 
forces  during  deployment  and  inflation.  To  represent  the 
environmental  conditions  of  reefing  line  cutter  use  more  com¬ 
pletely,  it  is  necessary  to  superimpose  the  effects  of  these 
acceleration  forces  on  cutter  reliability  on  the  above  data. 
Extensive  test  data  on  the  effects  of  acceleration  forces  on 
reefing  line  cutter  performance  are  not  available,  although 

♦7  Personal  Communication,  Picatinny  Arsenal. 
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an  Air  Force  drop  test  program  is  now  under  way  (May  1960)  to 
develop  information  on  the  spectra  of  forces  to  be  expected 
and  the  performance  of  standard  reefing  line  cutters  under 
high  acceleration  conditions. 

In  general,  laboratory  tests  show  that  the  acceleration 
forces  which  affect  reefing  line  cutter  performance  are  those 
which  are  applied  during  the  firing  pin  operation  and  delay 
train  burning.  It  appears  that  the  explosive  force  of  the 
charge  which  drives  the  knife  through  the  reefing  line  during 
the  actual  cutting  operation  is  sufficient  to  overcome  any 
g-forces  which  may  be  encountered. 

The  direction  of  firing  pin  travel  and  of  the  movement 
of  the  flame  front  in  the  delay  train  during  burning  are  the 
same.  Laboratory  testing  at  Picatinny  Arsenal  has  indicated 
that  acceleration  forces  applied  in  the  direction  of  firing 
pin  travel  and  flame  front  burning  have  virtually  no  effect  on 
the  reliability  of  the  cutter;  it  works  just  as  well  under  this 
type  of  acceleration  as  under  static  conditions.  However,  when 
the  acceleration  forces  are  applied  in  the  opposite  direction, 
the  magnitude  of  the  force  seems  to  determine  whether  the 
cutter  will  work  or  not. 

An  acceleration  force  applied  opposite  to  direction  of 
firing  pin  travel  tends  to  oppose  the  effect  of  the  firing 
pin  spring,  often  resulting  in  light  strikes  which  do  not 
fire  the  detonator.  When  the  delay  train  is  burning,  the 
particular  composition  used  in  the  M2A1  cutter  burns  v/ith  a 
flame  front  preceded  by  a  very  thin  zone  of  liquified  delay 
composition.  An  acceleration  force  in  the  direction  opposite 
to  the  flame  front  travel  tends  to  separate  this  liquified 
zone  from  the  unmelted  delay  powder  ahead  of  it,  thus  creat¬ 
ing  a  gap  in  the  delay  train,  and  often  preventing  further 
combustion  of  the  delay  material.  Of  course,  accelerations 
in  the  opposite  direction,  that  is,  in  a  direction  assisting 
the  firing  pin  spring,  force  the  burning  flame  front  into  the 
unburned  portions  of  the  delay  composition,  and  do  not  have 
these  effects. 

It  should  be  noted  that  a  centrifuge  was  used  to  apply 
the  accelerations  in  these  tests.  Thus,  the  reefing  line 
cutter  was  subjected  to  a  steady-state  type  of  acceleration, 
rather  than  the  short-period,  shock-type  acceleration  to  be 
expected  at  the  reefing  line  cutter  pocket  during  parachute 
canopy  deployment  and  filling.  Thus,  the  results  of  the 
testing  are  indicative  of  qualitative  effects,  but  cannot 
be  used  to  predict  quantitatively  the  effect  of  the  shocks 
encountered  in  field  use. 
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Figure  8  is  a  plot  of  the  test  data  on  the  effects  of 
counter-firing  pin  centrifuge  acceleration  forces  on  the  M2A1 
(and  M2A1  Modified)  reefing  line  cutter  made  available  for 
this  study  by  Picatinny  Arsenal.  Three  curves  and  one  point 
on  this  figure  represent  the  performance  of  the  M2A1  standard 
reefing  line  cutter  under  acceleration.  Two  difference  delays 
are  represented,  and  in  the  case  of  the  two-second  delay,  two 
difference  conditions  of  acceleration.  In  one  case,  the 
opposing  acceleration  forces  were  applied  parallel  to  the  direc¬ 
tion  of  firing  pin  travel;  in  the  other  these  opposing  forces 
were  applied  at  somewhat  of  an  angle  off  the  axis  of  the  fir¬ 
ing  pin  travel.  As  can  be  seen,  the  effects  of  opposing  angled 
forces  on  reliability  are  somewhat  greater  than  the  effects  of 
opposing  parallel  forces.  This  is  to  be  expected,  since  the 
angled  forces,  in  addition  to  affecting  the  force  of  the  fir¬ 
ing  pin  spring,  add  frictional  forces  by  driving  the  firing 
pin  against  the  sides  of  the  cutter  bore. 

The  four-second  delay  cutter  is  seen  to  be  affected  more 
by  acceleration  than  the  two-second  cutter.  This  is  attributed 
to  the  fact  that  the  four-second  delay  line  is  composed  of  two 
two-second  pellets,  while  the  two-second  cutter  contains  only 
one  pellet.  Thus,  the  acceleration  forces  on  the  four-second 
cutter  may  tend  to  pull  the  pellets  apart  slightly,  creating 
a  blank  zone  through  which  the  flame  front  cannot  travel. 

In  the  operation  of  the  reefing  line  cutter  in  the  para¬ 
chute  system,  it  is  generally  not  possible  to  determine 
whether  the  reefing  line  cutter  firing  pin  travel  and  delay 
train  burning  are  affected  by  acceleration  forces  parallel 
to  or  at  an  angle  to  the  long  axis  of  the  cutter,  although 
it  would  appear  that  the  data  on  angled  forces  are  probably 
more  representative  of  the  effects  of  acceleration  on  reefing 
line  cutter  reliability. 

The  magnitude  of  the  forces  on  the  reefing  line  cutter 
in  any  given  parachute  drop  will  depend  on  the  specific  para¬ 
chute  design,  on  the  speed  at  which  the  parachute  is  deployed, 
and  the  load.  Thus,  to  determine  the  reliability  figure  to 
be  applied  in  a  specific  case,  information  on  the  g-forces 
expected  and  their  orientation'  with  respect  to  the  reefing 
line  cutter  is  required,  either  from  instrumented  field  trials, 
or  from  engineering  calculations.  In  addition,  performance 
tests  on  the  cutters  under  shock  conditions,  either  laboratory 
or  field,  will  also  be  required.  The  aforementioned  Air  Force 
test  program  should  provide  such  data. 

In  field  investigations  of  failures  of  the  M2A1  standard 
reefing  line  cutter  in  high  speed  parachute  applications,  it 
was  found  that  in  many  cases  the  acceleration  forces  applied 
to  the  cutter  were  occurring  in  the  direction  opposite  to 
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M2A1  std,  4  sec,  parallel  forces  4.  II2A1  mod,  4  sec,  parallel  forces 
lf2Al  MOd,  4  sec,  angled  forces  5.  1I2A1  std,  2  sec,  parallel  forces 
li2Al  std,  2  sec,  angled  forces 
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Figure  8.  Effects  of  Reverse  Acceleration  on  Reefing  Line  Cutters 


firing  pin  travel.  In  an  attempt  to  eliminate  the  M2A1  reef¬ 
ing  line  cutter  failure  problem  for  this  type  of  application, 
the  modified  M2A1  reefing  line  cutter  was  developed.  This 
model  is  identical  with  the  standard  M2A1  except  that  it  is 
installed  in  the  opposite  direction,  and  has  a  stronger  fir¬ 
ing  pin  spring.  In  order  to  effect  installation  in  a  reverse 
position,  the  direction  of  firing  wire  pull  was  reversed. 

Figure  8  indicates  that  the  increase  in  strength  of  the 
firing  wire  spring,  in  general,  -increases  the  upper  limit  of 
tolerable  acceleration  on  the  four-second  cutter  from  the  100 
g  limit  of  the  M2A1  standard  to  approximately  175  g's  for  the 
four -second  M2A1  modified  cutter  with  opposing  accelerations 
applied  at  an  angle.  The  M2A1  modified  cutter  may  thus  be 
assumed  to  have  its  static  reliability  to  a  somewhat  higher 
degree  of  acceleration  than  the  standard  model. 


Laboratory  testing  of  the  modified  M2A1  cutter  indicates 
that  it  is  a  relatively  highly  reliable  device  under  static 
conditions : 


Test  Conditions 

Total  No. 
Tested 

No. 

Good 

No. 

Failed 

Laboratory  Ambient  (70°F) 

400 

400 

0 

Low  Temperature  (~65^F) 

80 

80 

0 

Cycled  High-Low  Temperature, 
High  Humidity 

20 

20 

0 

Total 

500 

500 

0 

Computed  reliability,  90%  confidence  -  0.995 


The  M2  reefing  line  cutter  was  the  original  model  from 
which  the  M2A1  was  developed,  and  differs  from  it  in  minor 
details  of  construction.  Field  investigation  indicates  that 
a  considerable  number  of  M2  cutters  are  still  in  use,  and 
that  procurement  of  this  model  may  be  resumed. 

Laboratory  test  data  (Picatinny  Arsenal)  indicate  rela¬ 
tively  high  reliability  under  static  conditions: 
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Test  Conditions 

Total  No. 
Tested 

No, 

Good 

No. 

Failed 

Laboratory  Ambient  (70OF) 

702 

702 

0 

Low  Temperature  (-65  to  -95°r) 

260 

260 

0 

High  Temperature  (+160OF) 

30 

30 

0 

High  Temperature ,  High 

Humidity  (+1650F,  100%) 

120 

120 

0 

Total 

1112 

1112 

0 

Computed  Reliability  90%  confidence  -  .998 

Some  laboratory  test  data  are  also  available  on  two  pro¬ 
prietary  reefing  line  cutters,  the  SC-100,  manufactured  by 
Ordnance  Specialties,  Inc.,  El  Monte,  California,  and  the  0A-A3 
made  by  Ordnance  Associates,  South  Pasadena,  California: 

SC-100 

Test  Conditions 

Total  No. 
Tested 

No. 

Good 

No. 

Failed 

Laboratory  Ambient  (70°F) 

500 

500 

0 

Low  Temperature  (-65°F) 

180 

180 

0 

Cycled  High-Low  Temperature, 
High  Humidity 

20 

20 

0 

Parachute  Use  Test 

100 

100 

0 

Total 

800 

800 

0 

Computed  reliability,  90%  confidence  -  0.997. 


In  centrifuge  acceleration  tests  at  154  g  (with  the  forces 
opposing  the  direction  of  firing  pin  movement),  12  cutters 
failed  of  100  tested. 
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0A-A3 


Test  Conditions 

Total  No. 
Tested 

No. 

Good 

No. 

Failed 

Laboratory  Ambient  (70OF) 

70 

70 

0 

Low  Temperature  (-65°F) 

40 

40 

0 

Cycled  High-Low  Temperature, 
High  Humidity 

10 

10 

0 

Total 

120 

120 

0 

Reliability,  90%  confidence  -  0.981 


No  data  on  acceleration  effects  on  the  0A-A3  were  avail¬ 
able  for  this  study. 

The  laboratory  test  data,  as  interpreted  in  the  light  of 
user  experience,  indicate  that  the  reliability  values  summarized 
in  Table  II,  for  the  conditions  noted,  may  be  used  for  computa¬ 
tional  purposes  in  evaluating  the  reliability  model.  It  should 
be  noted  that  these  are  tentative  values,  and  are  subject  to 
revision  as  more  extensive  test  and  use  data  are  accumulated. 


B.3  Strength  of  Parachute  Materials 


Data  on  the  measured  break  strength  of  parachute  materials 
from  which  the  mean  and  standard  deviation  of  materials  strength 
can  be  calculated  will  be  required  to  evaluate  the  reliability 
of  many  parachute  components  and  subcomponents.  Such  data,  in 
a  form  which  is  discussed  below,  are  readily  available  in  the 
files  of  parachute  and  parachute  materials  manufacturers,  since 
webbings,  tapes,  cords,  etc.  are  tested  by  both  the  textile 
manufacturer  and  the  parachute  fabricator  to  insure  compliance 
with  the  strength  requirements  of  the  appropriate  specifications. 

The  original  break-test  records  of  the  following  firms 
were  made  available  for  this  study  (all  are  materials  manu¬ 
facturers  except  for  Pioneer  Parachute  Company)  : 

Pioneer  Parachute  Company,  Inc.,  Manchester,  Conn. 

Bally  Ribbon  Mills,  Inc.,  Bally,  Pa. 

Phoenix  Trimming  Co.,  Chicago,  Ill. 

Narricot  Corporation,  Philadelphia,  Pa. 

Buser  Silk  Corporation,  Paterson,  N. J. 

Essex  Mills,  Inc.,  Pawtucket,  R. I. 

Fox  Specialty  Co.,  Inc.,  Lowell,  Mass. 
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Table  VIII.  Reefing  Line  Cutter  Reliability 


Type 

Use  Conditions 

Trials 

M2A1 

Std 

Low  g ,  Non- 
Tropical 

550 

M2A1 

Std 

Low  g,  Tropical 

260 

M2A1 

Std 

High  g,  with 
Firing  Pin 

550 

M2 

Low  g ,  Non- 
Tropical 

962 

M2A1 

Mod 

Low  g 

500 

M2A1 

Mod 

High  g,  with 
Firing  Pin 

500 

SC-100 

Low  g 

800 

SC-100 

High  g,  with 
Firing  Pin 

800 

OA-A3 

Low  g 

120 

Reliability  at 


Conf id 

once 

Coefficient 

Failed 

90% 

08^ 

2 

.990 

.989 

.986 

.985 

12 

.  931 

.925 

.916 

.  912 

2 

.990 

.989 

.986 

.985 

0 

.  998 

.997 

.996 

.995 

0 

.  995 

.  994 

.992 

.991 

0 

.995 

.  994 

.992 

.991 

0 

.  997 

.998 

.  995 

.  994 

0 

.  997 

.996 

.995 

.994 

0 

.  981 

.  975 

.966 

.962 
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In  addition,  some  records  on  tensile  strength  tests  of  high- 
strength  materials  were  obtained  from  the  Textile  Branch  of 
the  WADD  Materials  Laboratory. 

For  most  of  the  materials,  test  data  were  obtained  on  the 
products  of  more  than  one  manufacturer;  for  those  materials 
most  frequently  used  in  parachute  construction  data  were  avail¬ 
able  from  three  or  four  sources.  All  data  on  webbings  and  tapes 
represent  production  during  1959  and  1960,  and  thus  reflect  the 
use  of  the  current  type  of  nylon  yarn.  The  results  of  four  or 
five  break  tests  on  each  batch  of  webbing  and  tape  manufactured 
were  available  in  practically  every  case.  The  mean  of  these 
was  used  as  the  break  strength  of  the  batch.  In  the  cases  of 
cords,  one  break  per  batch  was  obtained.  Means  and  standard 
deviations  were  computed  by  usual  statistical  methods,  and 
are  presented  in  Table  IX. 

It  is  believed  that  the  data  collected  on  materials  for 
which  30  or  more  batches  were  tested  are  adequate  for  the 
purposes  of  the  reliability  computations  described  in  this 
report.  If  materials  with  fewer  tests  must  be  considered,  it 
is  recommended  that  further  break  test  data  be  collected. 

One  additional  comment  on  the  above  type  of  break  strength 
data  seems  to  be  necessary.  The  break  tests  from  which  the 
data  were  derived  were  done  on  fabric  tensile  testing  machines 
(Tinius  Olsen,  Scott  Tensile  Tester,  and  similar  types)  in 

which  the  rate  of  jaw  separation  is  relatively  low -  of  the 

order  of  inches  per  minute .  The  loads  to  which  these  mate¬ 
rials  are  subjected  during  the  deployment  of  a  parachute  are 
applied  at  a  much  higher  rate.  Accelerometer  traces  indicate 
that  the  total  elapsed  time  for  both  snatch  force  and  opening 
shock  in  a  typical  parachute  canopy  is  of  the  order  of  one 
second  .ii/ 

Thus,  in  order  for  the  break  test  data  to  be  completely 
valid,  it  is  necessary  to  establish  a  correspondence  between 
tensile  strength  at  low  and  high  rates  of  load  application. 

Very  little  data  are  available  in  this  area.  However,  the 
results  of  a  study  performed  by  MIT  for  the  Quartermaster 
Research  and  Development  Center,^/  show  that  there  is  little 
difference  in  the  break  strength  of  nylon  materials  under  loads 
applied  at  rates  varying  from  two  inches  per  minute  to  48  feet 
per  second.  Discussions  with  the  personnel  of  the  Textile 
Branch  of  the  WADD  Materials  Laboratory,  and  of  the  Textile, 
Clothing  and  Footwear  Division  of  the  Quartermaster  Research 
and  Engineering  Command,  indicate  that  other  experience  tends 
to  confirm  these  results. 

Thus,  available  evidence  appears  to  warrant  the  use  of 
laboratory  tensile  test  results  to  represent  the  performance 
of  the  materials  in  the  computation  of  parachute  canopy  reli¬ 
ability. 
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table  IX.  Measured  Mean  and  Standard  Deviation  of  Break  Strength, 
\  Nylon  Parachute  Webbings,  Tapes  and  Cords_/ 
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♦/  Data  presented  are  for  undyed  (natural)  and  condition  "U"  materials. 


Table  IX.  (Continued)  Measured  Mean  and  Standard  Deviation  of  Break  Strength, 

Nylon  Parachute  Webbings,  Tapes  and  Cords 
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Table  IX.  (Continued)  Measured  Mean  and  Standard  Deviation  of  Break  Strength, 

Nylon  Parachute  Webbings,  Tapes  and  Cords 
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APPENDIX  C 


CONFIDENCE  INTERVALS  ON  THE  PROPORTION 
OF  POSITIVE  VALUES  FROM  A  NORMAL  DISTRIBUTION 


C . 1  The  Problem 

C.1.1  Let  X  be  the  strength  of  the  fabric  (e.g.  webbing, 
cord,  etc.)  from  which  a  component  of  a  parachute  is  made.  It 
is  tested  by  loading  the  fabric  until  it  fails  and  the  force 
(in  pounds)  at  rupture  is  the  material  strength.  A  random 
sample  of  Nx  such  fabric  samples  is  taken  and  the  material 
strength  of  each  measured.  Let  us  consider  an  example  in  which 
we  have  a  sample  of  Nx  =  69  pieces  of  fabric  with  a  mean  strength 
X  of 

69 


Xi 

X  =  ^  ~.  .j- —  =  3449  pounds , 
69 

and  a  sample  standard  deviation  Sx  of 


32,761  =  181. 


We  assume  that  these  observed  material  strengths  come  from 
a  consistent  population  (or  distribution)  of  material  strengths. 
Let  this  population  have  a  mean  value  >Ux  and  a  population  stand¬ 
ard  deviation  o-^-  In  addition,  we  assume  that  the  distribution 
of  material  strengths  is  "normal".  That  is,  we  assume  that: 

Probability  of  a  material  strength  greater  than  or  equal 
to  X  is  given  by 


dt . 
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C.1.2  Similarly,  let  y  be  the  maximum  load  stress  on  the 
above  part  in  a  parachute  drop.  Test  measurements  of  y  are 
obtained  as  described  in  Section  4  of  this  report.  For  example, 
in  an  actual  test,  a  random  sample  of  Ny  =  11  such  load  stresses 
were  obtained  and  measured,  giving  a  mean  value,  y,  of 


y  = 


11 


S  yi 


=  1 , 704  pounds , 


and  a  sample  standard  deviation  of 


=yi47,456  =  384 


Again,  we  assume  that  these  observed  load  stresses  come 
from  a  consistent  population  (or  distribution)  of  load  stresses. 
Let  this  population  have  a  mean  value  M.y  and  a  population 
standard  deviation  (Ty.  In  addition,  we^assume  that  the  dis¬ 
tribution  of  load  stresses  is  "normal". 


C.1.3  If  we  take  one  random  value  x  of  material  strength 
and  one  random  value  y  cif  load  stress,  then  this  phase  of  para¬ 
chute  activity  will  be  successful  if  x  is  greater  than  y,  and 
will  fail  if  X  is  less  than  y.  Let  P  be  the  probability  of 
success .  Then 

P  =  Prob  (x  >  y)  -  Prob  (x  -  y  >  0) 


Under  the  conditions  of  (a)  and  (b) ,  and  if  we  assume  that 
X  and  y  are  statistically  independent,  it  is  easy  to  show  that 
the  random  variable  x-y  is  normally  distributed  with  mean 
-  iiy  and  standard  deviation +  0'y2  .  Hence, 


P  = 


V  2Tr  (CTx^  +  Cy^) 


OO 


V“2  TT 


dw 


[t  -  -  ^y)]  ^ 

2  (  CTx^  +  CTy^) 


dt 


-  (^x  -  ^v) 

V<rx^  +<ry^ 
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C.1.4  Sample  estimates  of  m.^,  xiy,  cr %  and  (Ty  are, 
respectively,  x,  y,  Sx  and  sy. .  The  problem  is,  from  these 
estimates,  to 

1.  Estimate  P 

2.  Describe  the  variability  or  quality  of 
this  estimate  in  terms  of  a  confidence 
interval. 


C.1.5  The  estimate  of  P.  The  estimate  of  P  is  obtained 
by  substituting  the  estimates  for  the  true  values.  That  is, 
if  p  is  an  estimate  of  P,  then 


oo 


p 


dt 


where  we  have  written 

z  =  1_:_1  =  X  -  y 


In  our  example 

X  -  y  =  3,449  -  1,704  =  1,745 
s  +  S2^  =  424.52 

X  -  y  =  4.11052 


z  = 


dt  =  0.99998026 


This  is  the  estimated  probability  of  success.  The  estimated 
failure  rate  is 

q  =  1  _  p  =  0.00001974  =  2.0  in  100,000. 
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This  statistic  is  the  most  convenient  estimate  of  P;  a  second 
estimate  could  be  the  "uniformly  minimum  variance  unbiased 
estimate"  of  P  as  given  in  Reference  18.  (Because  of  the 
transformation  from  z  to  p,  p  is  slightly  biased.) 

In  general,  both  estimates  are  quite  close;  our  preference 
at  present  is  for  p,  which  is  the  easiest  to  compute. 


C.1.6  A  confidence  interval  on  P  cannot  be  obtained  in 
this  problem  because  of  the  existence  of  the  many  nuisance 
parameters.  However,  an  "approximate  confidence  interval"  has 
been  obtained.  It  is  not  perhaps  a  confidence  interval,  but 
can  be  looked  on  as  a  figure  of  merit  similar  in  properties 
to  a  confidence  interval. 

To  describe  this  approximation  we  shall  first  describe  in 
Part  C.2  the  true  confidence  interval  in  a  problem  similar  to 
ours,  and  then  in  Part  C.3  describe  how  to  obtain  an  "approxi¬ 
mate  confidence  interval"  for  our  problem  based  on  the  results 
of  Part  C.2. 


C.2  Simplified  Problem  in  Which  Confidence  Interval  is  Available 


C.2.1  Let  us  consider  the  same  populations  of  x,  the 
material  strength,  and  y,  the  maximum  load  stress,  as  in  Part 
C.1.1,  but  change  the  sampling  procedure  as  follows. 

Take  a  random  observation  of  x  and  a  random  observation 
of  y  and  let  their  difference  be  d  =  x  -  y.  Assume  we  do  this 
N  times,  giving  a  sample  d^ ,  d2,  ....,  djj.  Now  let  us  estimate 
P  from  the  d's  alone. 

Clearly,  the  expected  value  of  d  is 
E (d)  =  y 

(T^Cd)  =  0-^2  =  <^x^  +<ry2  . 

Hence  Z  =  .  I  _  = 

+  <ry2  (Td 
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Now  if  we  define  the  statistics  d  and 


d  = 


N 

1  =  1 
N 


s^  as 


Sd  = 


2 


Then  an  estimate  of  z  is  the  statistic  where 


C.2.2  Plan:  We  shall  obtain  a  confidence  interval  for 
t’.  •'  population  quantity  P  by  first  obtaining  a  confidence 
interval  for  the  population  quantity  Z  and  then  obtain 

a  confidence  interval  on  P  by  using  the  fact  that  P  is  a  mono¬ 
tone  increasing  function  of  Z. 


C.2.3  Non-Central  "t":  To  keep  our  notation  that  of  the 
tables  we  shall  use.J-7/  let  us  define  the  non-central  t  statis¬ 
tic  as  t  =  x/Vw  where  x  is  a  random  variable  distributed  in  a 
Normal  distribution  with  mean  /  and  variance  1;  w  is  a  random 
variable  distributed  as  X ^/f  with  f  degrees  of  freedom;  and 
X  and  w  are  statistically  independent.  Thus,  t  has  a  non¬ 
central  t  distribution  with  f  degrees  of  freedom  and  non-central 
parameter  ? . 


WADD  TK  60-200 


81 


Let  us  symbolize  the  percentage  points  of  t  by  t(f,S,€  ) 
where  Prob  Et  >  t  (f,  S  ,^  )]  =€•  In  the  Tables  of  the  Non- 
Central  t “Distributional/  what  is  tabled  is 


X  (f,S  ,€  )  =  ^  ^  ) 

Vf 

For  negative  values  we  have  the  relationship 


t(f ,  -5  )  =  -t(f ,  8  ,  1-e  ) 


and  hence 

X  (f,  -s  ,e  )  =  -X  (f ,6  ,  1-e  ) 
C.2.4  Now  the  statistic 


^  VN  d  ^  Vn  d/  O'  d 
®d  ®d/ ^  d 

can  be  seen  to  be  distributed  as  non-central  t  with  f  =  N  -  1 
degrees  of  freedom  and  parameter 


Js  =  Vn  ^  VN  (14x  -^y) 

O'd  +  cry2 


Since  the  numerator  Vn  H/ cT ^  is  distributed  normally  with  mean 
value  Vlf  • -h-d/ (T (j  and  variance  1;  and  in  the  denominator  Sd^/O'd^ 
is  distributed  as  X^/(N-1)  with  N-1  degrees  of  freedom. 

Hence 

Probability  [t  (f  ,  S  ,  1-/8)  < Zd  <  t  (f  ,  S  ,  <^  )]  =1-/3 -a 


=  Prob 


t(f ,  S  ,  1-/S) 
Vn 


<  ^d  < 


t  (f  ,  &  ,  CL  ) 


Vn 
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Jj[ow  t  (f ,  S  ,ac  )  is,  for  any  fij^d  f  and  OC  ,  a  monotone  increas¬ 
ing  function  of  S  .  Hence  let  (z)  be,  for  any  fixed  f  and 
OC ,  the  solution  of  the  equation 

t  (f  ,  (Z)  ,0C  )  •  ZjJ 


Then  the  interval 


Zd  ^  t(f,  S  ,0C) 
V5? 


corresponds  to  the  interval 

(zdX  S 

in  that  all  values  of  the  random  variable  Z(j  that  lie  in  one 
interval,  lie  in  the  other;  and  all  values  of  zj  that  are  out¬ 
side  one  interval  are  outside  the  other. 

Similarly  the  two  intervals 


t(i,  S  ,  1-|S  )  , 
— 


and 


correspond . 

Hence  the  intervals 


t(f  ,  S  ,  1-/3)  ,  _  ,  t(f ,  ,CC  ) 

^  Zjj  <  ■ 


Vn 


and 


(zd)  <  S  (Zd) 

correspond.  Hence 

Prob  [fg^(zd)  <  ^  (zd)]  =  1-/3  -CC 
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which  is  interpreted  meaning  that  the  random  interval  (z^) 

to  (zjj)  has  a  probability  of  1-/3  -  a  of  containing  the 
true  value  Vn  ff'j.  Hence,  we  have  a  confidence  interval  of 
size  1- /3  -  CC  for  the  population  parameter  S  =  Vn 


C.2.5  In  terms  of  the  percentage  points  tabled  in  Tables 
of  the  Non-Central  t-Distribution,— I./  we  have  that  is  the 

solution  of  the  equation 


Vn  .  Zd  =  t  (f ,  Sx  (zd)  ,  di) 


Vf  "  X  (f ,  Soe  (zd)  ,  OC) 


Writing  for  (zd)  ,  we  have  the  confidence  interval  6oe 

to  ?,.ft  given  by  the  equations 


X  (f ,  •  Zd 

X  (f  ,  ,  1-/S)  =  Vn/?  .  Zjj 

and  this  confidence  interval  is  of  size  1-OC  -/3. 


The  tables  give  the  percentage  points  in  terms  of 


K  =  _ (instead  of  in  terms  of  S  ) 

Vf+I 

which  in  our  problem  is 


=  ^  =  /  N 

Vf+1  V  f +1  ’  d  d 


The  entry  for  the  percentage  points  on  Page  383  to  389  of  the 
tables  is 


oo 


"p"  = 


dt . 
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Hov/ever,  the  values  of  K  (called  Kp)  corresponding  to  the 
values  of  "p"  used  as  an  entry,  are  given  on  Page  3.  Reading 
the  percentage  points  as  a  function  of  K,  we  solve  the  equations 


X  (f ,  Kcc  ,  a  )  =  •  Zjj 

X  (f,  ,  1-0  )  =  VnTF •  Zd 


for  K  ( oC )  and  K  (1--/3 )  by  an  inverse  interpolation. 

Then  the  interval 

K  (oc)  to  >f+VN  K  (1-/3) 

will  be  the  confidence  interval  of  size  1- /S  -(X  on  the  para¬ 
meter 


C.2.6  If  we  wish  a  one-sided  confidence  interval,  as  may 
seem  appropriate,  we  need  only  set  /3  =  0 .  Then  the  confidence 
interval 


^+1)/N  K  (ct)  tooo 

will  be  a  confidence  interval  of  size  1-  eX  on  the  parameter 
d/  ^  d  ■ 

C.2.7  The  above  discussion  has  dealt  with  the  population 
parameter  -^d/^  d-  The  population  proportion  of  success  is 


Since  P  is  a  monotone  increasing  function  of  dj  we  have 

only  to  make  the  same  transformation  on  the  confidence  intervals 
for  >44  d/  O'  d  obtain  confidence  intervals  for  P. 
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C.2.8  Thus,  the  interval 


oo 


-vfMTN  K  (a) 


eo 


e-t2/2 


dt 


‘=^+3)/N  K  (1-^  ) 


is  the  confidence  interval  of  size  1- /3  -  OC  on  the  parameter  P. 


C.2.9  The  interval 


OO 


-  vf+.l)/N 


e-t2/2 
'  K  (oc) 


dt  to  1. 


is  the  one-sided  confidence  interval  of  size  1-OC  on  the  para¬ 
meter  OC  . 


C.2.10  Calculation:  Interpolation  in  the  percentage 
points  is  roughly  linear  in  X  (f .  S  . €  )  if  we  consider  X  to 
be  a  function  of  K  =  £>  /  V”f +1 .  The  Tables  give  X  (f ,  8  ,€  ) 
as  a  function  of 


CO 


OO 


dt 


and  would  seem  to  imply  that  interpolation  is  to  be  made  on 
"p".  This  will  not  be  satisfactory;  interpolation  must  be  done 
on  K. 


A  graphic  presentation  is  also  possible,  plotting 


K  (OC)  ‘M/(j 

as  a  function  of  Vn/T  x^j/s<j[  for  each  cx  and  f  (see  Figures  4, 
5,  and  6) . 
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C .3  Confidence  Intervals  for  the  Original  Problem 


C . 3 . 1  Reducing  to  the  Solution  of  Part  II,  An  Inefficient 
Technique 


The  pi’oblein  of  Part  C.l  can  be  reduced  to  that  of  Part 
C.2  by  first  noting  which  sample  has  the  smaller  number  of 
observations,  second  taking  a  random  sample  of  this  size  from 
the  larger  sample,  and  third,  randomly  selecting  pairs. 

Foi*  example,  in  the  example  of  Part  C.l,  the  y  sample 
was  the  smaller,  with  11  observations.  Hence,  we  can  take  a 
random  sample  of  11  from  the  69  observations  on  x.  The  resul¬ 
tant  sample  of  11  x's  is  then  randomly  paired  with  the  11  y's, 
giving  11  pairs  from  which  we  obtain  11  differences  x-y.  And 
from  here  we  can  proceed  as  in  Part  C.2. 

This  procedure  will  give  a  confidence  interval  which  is 
correct  in  the  sense  that  probabilities  can  be  exactly  deter¬ 
mined.  Since  we  are  essentially  throwing  away  data,  however, 
it  will  be  inefficient.  That  is,  for  any  given  probability 
of  coverage  of  the  true  parameter  (usually  called  the  "size" 
of  the  confidence  interval) ,  this  confidence  interval  will  be 
wider  than  that  computed  on  the  basis  of  all  the  observation. 


C.3.2  The  distribution  of 


z 


depends  not  only  on  the  parameter 

Z  =  ^x  -  ^  y 
V^x2  +  (TyS 

but  also  involves  nuisance  parameters.  Hence  a  confidence 
interval  in  the  classical  sense  cannot  be  obtained.  However, 
a  quite  satisfactory  approximation  has  been  obtained. 

In  this  Part  of  the  discussion  we  shall  give  a  rather 
straight  forward  derivation  of  the  approximation.  In  Part 
C.4  we  shall  examine  more  deeply  to  try  to  see  how  good  the 
approximation  is,  or  rather,  why  it  is  a  good  approximation. 
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C.3.3  The  plan  is  as  follows:  we  shall  examine  the  means 
and  variances  of  the  numerator  and  denominator  of  the  statistic 


_d _ 

Sd 

that  occurs  in  Part  C.2  and  those  of  the  statistic 


X  -  y 


that  occurs  in  Part  C.l,  and  try  to  equate  them  in  some  way. 

For  convenience,  we  shall  consider  the  square  of  the 
denominators.  (The  results  are  the  same.) 

Examination  shows 


E  (d)  = 

-ax  -^y 

(d) 

^  a  +  (Ty^  ^ 

(Td^ 

N 

N 

> 

E  (Sd^) 

=  (Tx^  +<ry2  = 

(Td^ 

9 

<t2  (s^2)  ^ 


E  (x-y)  =  M-^  -^y 

a  2  OE-y)  = 

Nx  Ny 

E  (Sjj^  +.Sy2)  =  o^x^  °’y^  =0'd^ 
<^2  (s  2  +  S  2)  .  20^  +  2£ll 

_C* 


The  variance  of  the  sample  variance  is  an  exact  result 
for  samples  from  a  normal  distribution 

We  note  that  the  mean  values  are  the  same.  We  also  see 
that,  in  the  problem  of  Part  C.l,  if  we  define 


=  +  P'y^ 

(Tx^  +  CTy^ 

""X  Ny 
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and 


f  =  (CTk^  +  CTy^ 

(T  +  cr 

f 


Then 

0-  2  (5^„y)  =  0  +  (T 

N 


and 

a  2  (s^2  +  s  2)  =  2(cr  +  g  y^)"^ 

f 

The  variance  of  the  numerator  and  the  variance  of  the  denominator 
are  now  in  the  same  form  as  those  for  Part  C.2.  Hence  if  the 
above  non-integer  values  of  N  and  f  are  used  in  the  solution 
of  Part  C.2,  we  will  have  an  approximate  solution  to  the  prob¬ 
lem  of  Part  C.l. 


Unfortunately,  we  cannot  compute  N  and  f  this  way  because 
we  do  not  know  or  ^  and  <r  Hence  the  next  approximation  is 

to  substitute  s^,  and  Sy  f6r  cr^  and  o'y,  obtaining 

~  o  2  ^2 

N  =  +  Sy 

®X^  +  Sy2 


o  2  ^22 

f  =  +  ®y  ) 


4 

^  + 
A  V 


Stc^  ,  Sy^ 


C.3.4  The  recommended  approximate  procedure  is  as  follows: 
Compute  iT  and  f ;  substitute  these  numerical  values  for  N  and  f 
in  the  equations  of  Part  C.2  and  thereby  compute  the  approximate 
confidence  interval.  Experience  has  shown  that  the  above  equa¬ 
tions  are  quite  cumbersome  for  computation  purposes.  Consider¬ 
able  ease  of  calculation  can  be  gained  by  the  following  tech¬ 
nique  : 
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Let 


Sj^2  =  smaller  of  Sj,2  or  Sy^ 

S2^  =  larger  of  or  Sy^ 

=  sample  size  corresponding  to  s^^ 

N2  =  sample  size  corresponding  to  S2^ 

2 

fl  =  Ni-1  =  degrees  of  freedom  corresponding  to  sj^ 
^2  ~  ^2-1  =  degrees  of  freedom  corresponding  to  S2^ 


Then  let 


Then 


N  =  N2  •-= 

1  +  0r 


Ni 


(1+r) 


f 


^  (1+r )  _ 

^  l+gr2 


(l+r)^ 


If  &  (and  hence  g)  is  less  than  1,  we  use  the  first  equa¬ 
tions  in  N2  and  f2.  If  ^  (and  hence  g)  is  greater  than  l,we 
use  the  second  equations  in  and  fg,  first  computing 
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C,3.5  In  the  example  of  Part  C . 1  we  have 


s  2  „  2 

r  =  -JL_  =  X  ^  147 ,456  ==  0.222175 


32^  Sy2 


32,761 


0 


Nc 


N. 


y_  =  =  0.159420 


N. 


N, 


69 


1-  =  10  =  0.147059 


68 


Hence 


N  = 


+  s 


Sx‘'  Sy- 
+ 


y  =  32,761  +  147,456  _  -^2  _  gg40 


N. 


32,761  147,456 

69  ^  11 


=  N. 


=  11  (1-222175)  =  12.9840 
1  +  0  r  (1.03542) 


(Sx^  +  Sy2)' 


(180,217)- 


(32,761)^  ^  (147,456)^ 


=  14.8295 


+ 


68 


10 


■X 


fo  <1+^)^  =  10  (1.222175)^  ^  14  3395 

,2 


1+gr" 


1.007260 


Hence  we  have 


vW  z  WSTT 


Vsx^ 


+  s-t 


'12.9840 
14. 8295 


=  3.84627 


Looking  into  the  Tables  of  the  Non-Central  t-Distribution_ 
for  £  =  0.10  and  f  =  14,  15,  and  16,  we  find 


WADD  TR  60-200 


91 


X  (f,  K,  0.10) 


f  -  degrees  of~  freedom 


p 

K 

14 

15 

10 

14. 8295 

.0100 

2.3263 

48 

3.325 

(49) 

3.276 

(43) 

3.233 

0040 

2.6520 

70 

3.766 

(54) 

3.712 

(48) 

3 . 064 

3.7212 

0025 

2 . 8070 

34 

3.977 

(58) 

3.919 

(50) 

3. 869 

3. 9289 

0010 

3.0902 

32 

4.363 

(62) 

4.301 

(56) 

4.245 

The  terms  in  parentheses  have  been  supplied  —  they  are 
the  first  differences.  Looking  at  them  we  see  that  interpola¬ 
tion  lor  degrees  of  freedom  is  linear.  That  is,  the  effect  of 
second  difference  terms  (meaning  fitting  a  second  degree  poly¬ 
nomial)  is  at  most  equal  to  0.0005. 

Similarly,  for  each  of  the  three  values  of  f,  we  find  that 
interpolation  of  X  vs .  K  is  linear.  Here,  checking  is  more 
difficult  as  the  K's  are  not  tabulated  at  equal  intervals.  How¬ 
ever,  second  and  third  degree  polynomial  interpolation  can  be 
done  by  the  use  of  divided  differences  or  by  the  use  of  Lagrangian 
Interpolation  Formulas.  Checking  in  this  manner,  we  find  that 
interpolation  for  K  is  linear;  higher  order  interpolation  gives 
negligible  adjustments. 

Hence,  interpolating  for  f  =  14.8295,  we  find  the  appro¬ 
priate  values  of  X(14.8295,  K,  0.10)  given  above.  Interpolat¬ 
ing  K-wise  to  solve: 


X  (14. 8295,  K,  0.10)  =  Vl/f  .  =  3 . 846  27 


we  have 


K-2.G520  70  ^  3.846  27  -  3.7212  ^  . 12507 

2.8070  34-2.0520  70  3.9289  -  3.7212  .2077 


hence 

K  =  2.652070  -(-/O  - 12507\  o.l549  64  =  2.745  384 

\0.2077  / 
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Hence  the  90%  lower  confidence  value  is 


(^)  QO  "  '  K  =  /~  ,  K  =  Vl.2191  47  •  K  -  3 . 0313  2 

V  N  V  12.9840 


Hence  the  90%  lower  confidence  value  of  P  is 

oo 


dt  =  .998783 


The  failure  rate  is  Q.go  =  1  -  P.90  =  0.001217  ^  1.2  in  1000. 


To  summarize;  in  this  example,  our  estimate  of  P  is 
0.9999803  with  a  90%  confidence  interval  of  .99878  to  1. 

(That  is,  this  interval  has  a  90%  chance  of  including  the 
true  value  of  P.  The  lower  bound,  .99878,  is  the  value  used 
as  the  reliability  at  a  90%  confidence  coefficient.) 

Alternatively,  the  estimate  of  the  failure  rate  Q  =  1  -  P 
is  .0000197  with  a  90%  confidence  interval  of  0 .  to  0.00123. 


C.3.6  Note :  If  we  look  at  the  differences  f-wise  (which 
are  given  in  parentheses)  we  note  a  possible  error.  The  second 
differences,  e.g.,  the  differences  between  the  quantities  in 
parentheses  are,  respectively,  G,  6,  8  and  6  for  p  =.010,  .004, 

.0025  and  .001.  Clearly  something  is  wrong  with  the  values 
for  p  -.0025.  If  we  take  differences  K-wise ,  we  see  that  the 
trouble  lies  in  the  value  for  16  Degrees  of  Freedom.  If  this 
is  changed  from  3.869  to  3.867,  the  second  differences  will  be 
satisfactory.  However,  this  change  would  not  affect  the  linear 
interpolation . 


C.3.7  A  speed-up  in  calculation  is  obtained  by  using  a 
graphical  procedure.  For  any  fixed  €  and  f,  we  can  plot  the 
line  of  K  vs.  X  (f ,  K,  €  )  (see  Figures  4,  5  and  6).  Entering 
with 


X  =  VnTF.  "  y>- 

^Si^  +  32^ 
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we  read  K,  for  the  appropriate  €  and  f ,  and  obtain  the  appro¬ 
priate  confidence  interval  as 


M.  f+1  v 

^  -J  N 


C , 4  Examination  and  Justification  of  Approximation 

C.4.1  The  Problem .  The  argument  by  which  the  approxima¬ 
tion  is  developed  in  Part  C.3  is  not  the  only  way  the  approxi¬ 
mation  can  be  developed.  Another  argument,  which  in  many  ways 
clarifies  aspects  not  considered  in  the  argument  of  Part  C.3, 
is  as  follows. 


We  wish  to  obtain  a  confidence  interval  estimate  of  the 
population  parameter  P,  where 


There- are  four  unknown  parameters  ^y>  ^x  ^y 

assume  Nj^,  N2 ,  fi,  f2  known),  and  a  confidence  interval 
estimate  of  one  function  of  them  (in  this  case,  P)  cannot  be 
obtained  in  any  known  method. 


C.4.2  The  First  Approximation  Step.  Clearly  the  sufficient 
statistics  are  X,  y,  sx  and  sy.  While  the  upper  and  lower  ccn - 
fidence  intervals  are  functions  of  these  four  sufficient  sta¬ 
tistics,  we  do  not  know  what  the  best  function  is.  However, 
we  shall  assume  that  a  satisfactory  confidence  interval  can  be 
obtained  on  the  basis  of  the  distribution  of  the  statistics 


z 


7 


X  -  y 

/sv2 


in  a  manner  analogous  to  the  development  of  Part  C.2,  assuming 
that  any  possible  inefficiency  thereby  introduced  will  be  small. 
This  is  the  First  Approximation  Step. 
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C.4.3  Reduction  to  One  Nuisance  Parameter.  The  nuisance 
parameters  must  next  be  considered.  It  is  easy  to  show  that 
the  distribution  of  the  statistic  z  only  depends  on  the  para¬ 
meters  . 


Z  =  -^x  -  ^y 

V (Tx^  ^ 

and 

(Ty2 

Hence,  we  now  have  only  one  nuisance  parameter,  R.  The 
problem  is  now  to  obtain  a  confidence  interval  estimate  of  P 
for  given  known  values  of  the  variance  ratio  R. 


C.4.4  The  Second  Approximation  Step  and  Its  Implications. 
The  statistic  z  is  not  distributed  as  a  constant  times  non- 
central  t,  because  sx^  +  Sy2  is  not  distributed  as  a  constant 
times  X.  A  basic  approach  would  be  to  develop  the  exact 
distribution  of  z,  but  this  is  a  very  involved  process.  How¬ 
ever,  the  distribution  of  Sx^  +  Sy2  is  quite  satisfactorily 
approximated  by  a  constant  times  Using  the  technique  of 

equating  the  first  and  second  moments  of  Sjj.”  +  Sy2  and  zX^, 
as  described  in  Part  C.3,  we  have  ^ 


€2  "  O  " 

^x^  +  C 


approximately  distributed  as 
where 


with  f  degrees  of  freedom 


f 


((Tx^  +  (ry2)^ 

(Tx^  ^  (ry4 


(R  +  1)^ 
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Note  that  f  only  depends  on  R;  Z  does  not  enter .  This  is 
the  Second  Approximation  Step. 

Dividing  numerator  and  denominator  of  the  statistic  z  by 
we  obtain 


(x  -  y)  /  +  O'  y^ 

V  (Sx^  +  Sy^)/  (CTx^  +a'y2) 


2 

The  denominator  is  approximately  distributed  as  X  /f  and 
hence  we  now  have  the  appropriate  denominator  statistic  for 
Kon-central  t .  The  numerator  is  normally  distributed  with  mean 
^x  “  y  variance 


(Tx^  4,  O'  y^ 

Nx  Ny 

<J^2  +  tTyZ 

Hence  z  is  approximately  distributed  as  a  constant  times  non- 
central  t,  with  f  degrees  of  freedom,  and 


z 


CTy^ 


is  approximated  distributed  as  non¬ 
freedom  and  non-central  parameter 

-central 

t  with  f  degrees  of 

^  _  ^x  -  Ay 

/(Tx^ 

+  <ry2 

VcTx^  +  0'y2 

/  (Tx^ 

0-y2 

V 

"  Xy 

Now  if  we  define  N  as 


^  (Tx^  +  (Ty^  ^  R  +  1 

(Tx^  Cry2  ^  +  2^ 

Nx  Ny  Nx  Ny 
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(N  only  depends  on  R)  we  have  that  the  statistic  z  Vn  is 
approximately  distributed  as  non-central  t  with  f  degrees  of 
freedom  and  non-central  parameter 


+  K-y)  -/n 

+  fl'y2 

We  see  that,  to  this  point,  while  the  introduction  of  the 
equation  for  f  (the  degrees  of  freedom)  did  involve  an  approxi¬ 
mation  (the  second  approximation  step) ,  the  introduction  of  N 
was  purely  a  symbolic  convenience.  It  did  not  introduce 
another  approximation. 


C.4.5  Recapitulation .  Thus,  if  we  know  the  true  popula¬ 
tion  variance  ratio 


we  can  compute  f  and  N  as  given  above.  Substitution  of  these 
values  into  the  technique  described  in  Part  C.2  will  give 
an  excellent  approximate  confidence  interval. 


C.4.6  The  Third  Approximation  Step.  However,  R,  the 
true  population  variance  ratio  is  not  known,  and  it  is  neces- 
sarj^  to  resort  to  a  Third  Approximation  Step.  We  replace  R 
by  R,  the  sample  variance  ratio, 


R 


°x 
s  2 

Sy 


in  the  equations  for  f  and  N.  Call  the  results  f  and  N. 
That  is 


f  = 


(R 


5£  ^ 


-,.2  ,.=  -2  2.2 

j.)  _  (^x  +  ^y  ) 


.  s 


X 


+ 


N  = 


R  +  1 
-1 

Nx  N. 


+  s. 


2 


N, 
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Using  these  approximations  to  f  and  N,  we  have  obtained 
the  confidence  intervals  given  in  Part  C.3.3. 


C.4.7  Additional  Comments.  These  approximate  confidence 
intervals  appear  to  be  entirely  satisfactory  for  this  applica¬ 
tion.  One  possible  check  is  to  note  the  effect  of  a  change  in 
R  on  the  answer.  If  it  is  negligible,  then  clearly  the  third 
approximation  step  is  quite  good  (the  first  two  have  been  shown 
to  be  very  good) .  If  we  try  doubling  R  or  halving  K  in  the 
example  given,  the  effect  on  the  confidence  interval  is  quite 
small,  so  we  can  be  quite  confident  in  the  confidence  interval 
obtained . 

However,  this  check  does  not  work  both  ways;  even  if  the 
effect  of  doubling  R  or  halving  it  is  large,  the  approximate 
confidence  intervals  may  be  quite  correct. 


C . 5  Assumptions  of  Statistical  Independence  and  Normality 


To  summarize  the  content  of  this  section,  one  must  con¬ 
sider  the  estimate,  p,  of  successful  operation  and  the  con¬ 
fidence  interval  about  it,  given  in  Parts  C.i  to  C.4,  as 
figures  of  merit.  It  appears  that  they  are  quite  satisfactory 
figures  of  merit. 


C.5.1  Reviewing  the  previous  paragraphs,  we  see  that  in 
addition  to  the  three  approximation  steps  described  above  in 
part  C.4,  we  have  made  two  other  assumptions:  statistical 
independence  and  Normality.  We  have  assumed  that  the  distri¬ 
butions  of  X,  the  material  strength  and  y,  the  applied  load 
stress,  are  statistically  independent.  This  seems  to  be  quite 
appropriate  within  the  accui’acy  of  the  kind  of  data  we  are 
using.  It  is  hard  to  see  how  x  and  y  can  be  correlated;  about 
the  only  possibility  is  that  certain  atmospheric  conditions 
affect  both  x  and  y,  but  even  here  it  is  probable  that  the 
distribution  of  x-y  is  not  affected. 


C.5.2  A  more  disturbing  assumption  is  that  the  difference 
x-y  is  Normally  Distributed.  That  is,  we  assume  that  the 
probability  that  x-y  is  larger  than  W  is 


o>» 


(t-i(i)2/2fl'd^ 


dt 
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This  means  that  if  we  can  approximate  the  two  constants  and 
(T^,  we  can  compute  any  probability. 

In  many  statistical  problems,  careful  examination  has 
shown  that  the  answers  are  quite  insensitive  to  Normality, 
so  that  the  assumption  of  an  underlying  Normal  Distribution 
may  be  warranted  since,  even  marked  deviations  from  Normality 
will  only  slightly  affect  the  results.  However,  this  occurs 
only  near  the  center  of  the  distribution;  it  surely  does  not 
apply  when  we  are  trying  to  estimate  proportions  far  out  in 
the  tails.  A  distribution  can  be  satisfactory  approximated 
by  a  Normal  Distribution  for  the  central  90%,  but  may  differ 
quite  markedly  beyond  the  95%  point . 

It  is  quite  dubious  whether  we  can  estimate  the  2  in  100,000 
point  by  samples  of  69  and  11  observations  which  seem  to  be 
equivalent  to  less  than  18  pairs  of  measurements  of  x-y.  To 
project  to  the  0.00002  point,  we  use  the  Normal  Distribution. 

But  to  check  the  correctness  of  this  we  clearly  need  at  least 
100,000  observation  pairs. 

Thus,  it  is  very  clear  that  the  estimate  of  failure  rate 
is  very  dependent  on  the  assumption  of  Normality.  However,  it 
will  not  be  possible  to  obtain  100,000  observation  pairs,  so 
our  answer  is  a  good  current  guess  and  is  surely  an  excellent 
figure  of  merit,  as  is  the  corresponding  confidence  interval. 


C.5.3  However,  the  approximations  made  can  be  shown  to 
be  fairly  good.  If  the  method  for  obtaining  the  estimate  p 
is  examined,  we  note  that  there  was  an  intermediate  step  in 
which  Xi-d/CTd  estimated  from 


z 


Now  z,  the  estimated  of  O'  is  a  typical  statistic 

of  the  kind  described  at  the  beginning  of  this  section.  It 
is  very  robust,  that  is  its  distribution  is  quite  insensitive 
to  Normality;  or,  to  put  it  another  way,  its  distribution  is 
insensitive  to  the  true  underlying  population.  (Even  this 
small  effect  is  easily  taken  into  account;  it  is  primarily 
dependent  on  the  deviation  of  the  fourth  central  moment  from 
3  0"^).  The  confidence  interval  on  z  is  more  dependent  on 
the  underlying  population,  but  is  still  fairly  insensitive. 


WADD  TR  60-200 


99 


The  sensitivity  to  Normality  arises  in  converting  to  the 
corresponding  proportion  by  the  transformations 


eo 


Here,  the  Normal  assumption  is  directly  involved.  If 
we  know  the  shape  of  the  underlying  population  and  it  was  not 
Normal,  we  would  use  another  transform,  not  the  above  Normal 
one.  That  is,  if  we  had  enough  data  to  determine  the  shape 
of  the  underlying  population  (say  100,000  pairs  of  observations), 
then  we  could  obtain  a  much  better  estimate  of  P  by  calculating 
a  more  appropriate  transformation  from  z  or  perhaps  even  from 
x-y  and  Vsx^  +  Sy2 . 

Thus,  if  we  wish  to  estimate  P,  the  true  proportion  of 
successes,  the  error  due  to  the  Normality  assumption  may  be 
(and  presumably  is)  much  larger  than  the  errors  due  to  all  the 
other  assumptions  and  approximations..  Hence  our  conclusion 
that  the  estimate  p  and  its  corresponding  confidence  interval 
can  only  be  looked  on  as  appropriate  figures  of  merit  for 
evaluation  or  comparison.  The  estimate  p  is  the  figure  of 
merit  relating  to  performance;  the  confidence  interval  gives 
some  sense  of  the  effect  of  sampling  errors  on  this  figure  of 
merit . 


C.5.4  It  may  also  be  seen  that  since  the  estimate  z  and 
the  confidence  interval  about  it  are  robust  (that  is,  insensi¬ 
tive  to  deviations  from  Normality  in  the  underlying  population) , 
they  could  be  used  as  figures  of  merit  used.  Consideration 
should  be  given  to  this  concept  in  future  work. 
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There  is  an  intermediate  position  possible  which  states 
that  since  p  and  z  are  mathematically  related  by 

oo 


dt 


we  have  that  z  is  a  monotone  function  of  p  (and  vice  versa)  , 
so  that  if  only  p  is  given,  we  can  still  compute  z.  Hence, 
the  use  of  p  computed  this  way  as  a  figure  of  merit  is  the 
same  as  using  z  as  a  figure  of  merit.  Therefore,  we  can  look 
on  the  use  of  p,  computed  as  above  from  z  when  we  do  not  know 
the  true  underlying  population,  as  really  being  equivalent  to 
the  use  of  z  as  a  figure  of  merit . 


C . 6  Tables  of  Percentage  Points  of  the  Non-Central  t-Distribut ion 

The  following  tables  of  the  Percentage  Points  of  the  Non- 
Central  t-Statistic  are  reproduced  from  pages  383  through  389 
of  Reference  17. j!!/  To  develop  the  plots  presented  in  Figures 
4,  5,  and  6  of  Section  4,  the  confidence  coefficient  has  been 
taken  as  1.0  -  €  .  The  conversion  from  the  p  of  the  tables  to 
the  K  of  Figures  4,  5,  and  6  and  equation  14  of  Section  4.3.1 
(see  paragraph  C . 2 . 10  of  this  appendix)  is  given  on  page  3  of 
Reference  17: 


p 

K 

2500 

0.674490 

1500 

1.036433 

1000 

1.281552 

0650 

1.514102 

0400 

1.750686 

0250 

1.959964 

0100 

2.326348 

0400 

2.652070 

0025 

2 . 807034 

OOlO 

3.090232 

♦/  The  copyright  notice  of  Resnikoff  and  Lieberman,  Tables  of 
~  the  Non-Central  t-Distr ibution ,  Stanford  University, Press, 
1957,  states:  "Reproduction  in  whole  or  in  part  is  permitted 
for  any  purpose  of  the  United  States  Government." 
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mClNTACI  WMTS  Of  t,  TUI  NON-CINTIAL  t-fTATISTIC  TMI  INTRIU  IN  TMI  TAtU 
avi  THI  VALUB  Of  >  SUCH  THAT  fr  [l/Vl>Ml=t 

f  ii  Ih#  number  of  degree!  of  freedom;  the  non<entrelity  perameter  is  Vf  4- 1'  Kp. 

Kp  it  the  itenderdized  normal  deviate  exceeded  with  probability  p. 
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3A19 

1.681 

6.086 
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MROmTACI  MINTS  OT  I,  TNI  NOKI-CINTtAL  »4TATItnC  TNI  INTKIM  IM  TNI  TAMJ 
aVI  TNI  VALUB  or  B  SUCN  TNAT  Ir  [t/vf>Blrx«. 

f  it  th*  number  of  dagraat  of  freedom ;  the  rKin<eritralily  parameter  it  Vf  +  I  Kp. 

Kp  it  the  ttandardized  normal  deviate  exceeded  with  probability  p  gp  FREEDOM  10 
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^■•CINTACC  rOINTI  OK  I,  THI  NON-CINTRAL  t^ATISTIC.  TNI  INTtlH  IN  TNI  TAMJ 
CIVI  TMI  VALUn  Of  H  lUCH  TNAT  fr 

f  is  th«  number  of  degrees  of  freedom ;  the  non<entrallty  parameter  is  Vf  +  I  Kp. 

Kp  is  the  standardixed  rrormal  deviate  exceeded  with  probability  o.  _ 
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mClNTACf  POINn  or  l,  TNI  NON-CINTIAL  MTATISTIC.  TNI  INTlin  IN  THI  TAtU 
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f  is  the  number  of  <J«i|rees  of  freedom;  the  noo<entrelity  perameter  is  Vf  4- 1  Kp. 

Kp  is  the  startd^rd!2i!id  normal  deviate  exceeded  with  probability  p. 
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APPENDIX  D 


LIST  OF  ORGANIZATIONS  CONSULTED 


D . 1  Military : 

1.  Ammunition  Engineering  Branch 
Industrial  Engineei'ing  Division 
Picatinny  Arsenal 

Dover,  New  Jersey 

2.  Airborne  Systems  Test  Activity 
Array  Field  Evaluation  Agency 

Quartermaster  Research  and  Engineering  Command 
Yuma,  Arizona 

3.  Airborne  Service  Test  Division 

U.  S.  Army  Airborne  and  Electronics  Board 
Fort  Bragg,  North  Carolina 

4.  6511th  Test  Group  (Parachute),  USAF 
Naval  Auxiliary  Air  Station 

El  Centro,  California 

5.  Functional  Textiles  Section 
Textile  Branch 
Materials  Laboratory 

Wright  Air  Development  Division 
Wright -Patterson  Air  Force  Base,  Ohio 

6.  Technical  Services  Branch 

Clothing  and  Survi-val  Equipment  Division 
Middletown  Air  Materiel  Area 
Olmsted  Air  Force  Base,  Pennsylvania 

7.  Textile  Engineering  Laboratory  Branch 
Textile,  Clothing  and  Footwear  Division 
Quartermaster  Research  and  Engineering  Command 
Natick,  Massachusetts 
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D.2  Industrial : 

1.  Pioneer  Parachute  Company,  Inc. 
Manchester,  Connecticut 

2.  Buser  Silk  Corporation 
Paterson,  New  Jersey 

3.  Phoenix  Trimming  Company 
Chicago,  Illinois 

4.  Narricot  Corporation 
Philadelphia,  Pennsylvania 

5.  Bally  Ribbon  Mills,  Inc. 

Bally,  Pennsylvania 

0.  Catalyst  Research  Corporation 
Baltimore,  Maryland 

7.  Hercules  Powder  Company 
Wilmington,  Delaware 

8.  Essex  Mills,  Inc. 

Pawtucket,  Rhode  Island 

9.  Fox  Specialty  Co.,  Inc. 

Lowell,  Massachusetts 
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